General
- Target DOC-WI2136.lnk
- Size 1KB
- Sample260803-1pplmayckd
- SHA256 7872df613d8d8e0f829cfe95b83aa891d58652e374bd22ec93991e04a1039875
- MD5 297ec84ef7b91963b48de8ceed1a0474
- SHA1 4a32062ab79d85a28db090382b3936044a13414c
- SHA512 162d152e43c5fa08d6f19c2ff4fac53b558cf144c95a450c4e9f5eb13184b15ba168200716e8e37735d679ec85d0e2de1cad0838776e41abd2c58f9be694eca2
- TLSH T16C3164103EF80A24F3B39E7284BB671089BEB95A8D10C61D0140860C1032A02E6BBF77
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WI2136.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-WI2136.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-WI2136.lnk
- Size 1KB
- SHA256 7872df613d8d8e0f829cfe95b83aa891d58652e374bd22ec93991e04a1039875
- MD5 297ec84ef7b91963b48de8ceed1a0474
- SHA1 4a32062ab79d85a28db090382b3936044a13414c
- SHA512 162d152e43c5fa08d6f19c2ff4fac53b558cf144c95a450c4e9f5eb13184b15ba168200716e8e37735d679ec85d0e2de1cad0838776e41abd2c58f9be694eca2
- TLSH T16C3164103EF80A24F3B39E7284BB671089BEB95A8D10C61D0140860C1032A02E6BBF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.