General
- Target DOC-CTJNQS.lnk
- Size 1KB
- Sample260803-16sdvagg22
- SHA256 2f284fdc09e7f9c0377d5fa064f63abc1cfcf3ce4b72de8a44ef3d6bc539c78b
- MD5 309a79f685324a7f8e299f3ab27d20a4
- SHA1 b9774952248ea981da171352828eaae31a968311
- SHA512 fcbb33e607fb05010d86319c8b0d150a04556c12ede29fcc22841c57c9387ff0e1f5bb0280b995997726f3367b8aef86054ce66d6ea1effe1d6f5cfde7cfdd9c
- TLSH T100319C003EFD0664F3B39FB294BB571089FBB8958D20CA1D0140560C5032A01E5BAF6B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CTJNQS.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-CTJNQS.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-CTJNQS.lnk
- Size 1KB
- SHA256 2f284fdc09e7f9c0377d5fa064f63abc1cfcf3ce4b72de8a44ef3d6bc539c78b
- MD5 309a79f685324a7f8e299f3ab27d20a4
- SHA1 b9774952248ea981da171352828eaae31a968311
- SHA512 fcbb33e607fb05010d86319c8b0d150a04556c12ede29fcc22841c57c9387ff0e1f5bb0280b995997726f3367b8aef86054ce66d6ea1effe1d6f5cfde7cfdd9c
- TLSH T100319C003EFD0664F3B39FB294BB571089FBB8958D20CA1D0140560C5032A01E5BAF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.