General
- Target DOC-1J3XWR.lnk
- Size 2KB
- Sample260803-1jd8psgb72
- SHA256 0ece3f44863300ff4ea8eab3d30047ef168efc2ba2179e56eb8ad8161c2fddd4
- MD5 14aef2370428816c77c764a5aa53fcc3
- SHA1 a84b4c32adb484da05313979f4ae08c7c875fedc
- SHA512 22d3abb7498ed0505b981bf25942d4b6e52cc52a63b30efe42e608b504d9d1db115f5175c3f084d7028fc16020fbd0c370ee6edce414078505f9479f95674b03
- TLSH T13141F6943AF915D9F2BA8E32EDFE671048BFF9525CA1C58D0980860D1422B05E977F27
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1J3XWR.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-1J3XWR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-1J3XWR.lnk
- Size 2KB
- SHA256 0ece3f44863300ff4ea8eab3d30047ef168efc2ba2179e56eb8ad8161c2fddd4
- MD5 14aef2370428816c77c764a5aa53fcc3
- SHA1 a84b4c32adb484da05313979f4ae08c7c875fedc
- SHA512 22d3abb7498ed0505b981bf25942d4b6e52cc52a63b30efe42e608b504d9d1db115f5175c3f084d7028fc16020fbd0c370ee6edce414078505f9479f95674b03
- TLSH T13141F6943AF915D9F2BA8E32EDFE671048BFF9525CA1C58D0980860D1422B05E977F27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.