General
- Target DOC-XTBK53.lnk
- Size 1KB
- Sample260803-1h99ragb65
- SHA256 5b2419891106b6ec145ad94b80bdb463f286918253ac5d27cbe981fccb4cd669
- MD5 4cceb4fa48331d1a416a6fec791a5c35
- SHA1 f0e7385cd8a7c4418bc928b93c377de3075f31f9
- SHA512 50bebff08c264fd3f4f8c8d8fa3a016137ea47680c8809c1a49e6ebbf0aac6d25aeda8f765116a51918e01f869eb8471d54fd76efc26687898ebf2f85ea1ac08
- TLSH T13A3147103EFD0A28F3B79F7684BF5B1489BBB9668D20C61D0140864D5432A01E67BF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XTBK53.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-XTBK53.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-XTBK53.lnk
- Size 1KB
- SHA256 5b2419891106b6ec145ad94b80bdb463f286918253ac5d27cbe981fccb4cd669
- MD5 4cceb4fa48331d1a416a6fec791a5c35
- SHA1 f0e7385cd8a7c4418bc928b93c377de3075f31f9
- SHA512 50bebff08c264fd3f4f8c8d8fa3a016137ea47680c8809c1a49e6ebbf0aac6d25aeda8f765116a51918e01f869eb8471d54fd76efc26687898ebf2f85ea1ac08
- TLSH T13A3147103EFD0A28F3B79F7684BF5B1489BBB9668D20C61D0140864D5432A01E67BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.