General
- Target DOC-3G18L8.lnk
- Size 1KB
- Sample260803-1m17msgc54
- SHA256 1ab9bfa8c9c77dad2ec7d0f1c16cbdf0938cac08f5a0d03e59f01efedc4039ec
- MD5 413732c6e32fa685dc98de69937bfce5
- SHA1 4b588925d2b2ef36225ba58f27b025184c53b826
- SHA512 e5263684f462ae2ace62fea4982858e905574dc06831ee8b31a0be33cfbe562f69bbdb4b576b803db04b4feabf34bb9f2e08889c612c4f8b45c99cd1e0b88d0f
- TLSH T12C3164103EFD0628F3B39E7680BB6B2489BEB9668D10DA1E0140860D1432A01E27AF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3G18L8.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-3G18L8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-3G18L8.lnk
- Size 1KB
- SHA256 1ab9bfa8c9c77dad2ec7d0f1c16cbdf0938cac08f5a0d03e59f01efedc4039ec
- MD5 413732c6e32fa685dc98de69937bfce5
- SHA1 4b588925d2b2ef36225ba58f27b025184c53b826
- SHA512 e5263684f462ae2ace62fea4982858e905574dc06831ee8b31a0be33cfbe562f69bbdb4b576b803db04b4feabf34bb9f2e08889c612c4f8b45c99cd1e0b88d0f
- TLSH T12C3164103EFD0628F3B39E7680BB6B2489BEB9668D10DA1E0140860D1432A01E27AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.