General
- Target DOC-ZTNP8F.lnk
- Size 1KB
- Sample260803-1demaacl4t
- SHA256 3009ca42593cbb789801124223f7cd3100006c0287a21b87a8a66ec933684a75
- MD5 1a342f9adb7c3a529537aa6343953264
- SHA1 b696a8e1474a2cb1f54894c8ea8de5e4ea40b7a6
- SHA512 e62dc5503cf6d6380a9c36380e5ef004326175022e7e97b4ee0b6cc38806c08c811fdf4ecc2ddb414a13cdc1fb89a4502cabae7e44c81bfac55a08b744f27af5
- TLSH T1773147103EFD4A68F3B79F7684BB971089BBB8568D10CA1D0140864C1032E01E67BF77
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZTNP8F.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-ZTNP8F.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-ZTNP8F.lnk
- Size 1KB
- SHA256 3009ca42593cbb789801124223f7cd3100006c0287a21b87a8a66ec933684a75
- MD5 1a342f9adb7c3a529537aa6343953264
- SHA1 b696a8e1474a2cb1f54894c8ea8de5e4ea40b7a6
- SHA512 e62dc5503cf6d6380a9c36380e5ef004326175022e7e97b4ee0b6cc38806c08c811fdf4ecc2ddb414a13cdc1fb89a4502cabae7e44c81bfac55a08b744f27af5
- TLSH T1773147103EFD4A68F3B79F7684BB971089BBB8568D10CA1D0140864C1032E01E67BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.