General
- Target DOC-VL22TF.lnk
- Size 2KB
- Sample260803-1khyaagc23
- SHA256 a20028d939908d3a6c247a5d7b7c6a46c998e254bdeae49efec4e1e8015a0031
- MD5 06a1758634303ad0080351872b553d47
- SHA1 d637a2a1037a0cfe501b127400a9e708e59d39f6
- SHA512 24e49987c27e61030af85f127bc684fd39a169181989fcb3d8f74e69ee0ab4a0a423a9e099d43c12f8bc7a761f9298cb1196131ef1932eafed819d1e6d4169e2
- TLSH T1114125902AE901E8F3FB9F72DDBE3751847BB9568D60CA8D0940C20C0423B02E57BB63
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VL22TF.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-VL22TF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-VL22TF.lnk
- Size 2KB
- SHA256 a20028d939908d3a6c247a5d7b7c6a46c998e254bdeae49efec4e1e8015a0031
- MD5 06a1758634303ad0080351872b553d47
- SHA1 d637a2a1037a0cfe501b127400a9e708e59d39f6
- SHA512 24e49987c27e61030af85f127bc684fd39a169181989fcb3d8f74e69ee0ab4a0a423a9e099d43c12f8bc7a761f9298cb1196131ef1932eafed819d1e6d4169e2
- TLSH T1114125902AE901E8F3FB9F72DDBE3751847BB9568D60CA8D0940C20C0423B02E57BB63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.