General
- Target DOC-NEPK7I.lnk
- Size 2KB
- Sample260803-1danbscl31
- SHA256 b0ae271d412cf95ff13452c371abb026866ee2ce56b77940397d5e45699a03d6
- MD5 20e2e882247b8f643766b0537e836bc9
- SHA1 e7e8cad64de51c54286b5f07c2a5428da4621a27
- SHA512 3aab434d110c3b8abaf17916d8ce178a0e6b69cfcd4ff22aec069c4571ab3801a9c1e7c5fcc756c1d8f5e5214d84d5393e10393409097f59db018ab3d46d0a98
- TLSH T1D34154802BED05D8F3FA9F72D9BE77158AB7B9A24D21C68C0850814D5422B00E1B7B63
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NEPK7I.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-NEPK7I.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-NEPK7I.lnk
- Size 2KB
- SHA256 b0ae271d412cf95ff13452c371abb026866ee2ce56b77940397d5e45699a03d6
- MD5 20e2e882247b8f643766b0537e836bc9
- SHA1 e7e8cad64de51c54286b5f07c2a5428da4621a27
- SHA512 3aab434d110c3b8abaf17916d8ce178a0e6b69cfcd4ff22aec069c4571ab3801a9c1e7c5fcc756c1d8f5e5214d84d5393e10393409097f59db018ab3d46d0a98
- TLSH T1D34154802BED05D8F3FA9F72D9BE77158AB7B9A24D21C68C0850814D5422B00E1B7B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.