General
- Target DOC-1G6DRU.lnk
- Size 2KB
- Sample260803-1wsxmage39
- SHA256 c7eb7eddf1e811d29dd54b9492986c78470ade5f514a8b96a1b5427ad5d415da
- MD5 6722cd310979f201f350c12b2f740af7
- SHA1 e1d62852f01bb6182d8131ec5e888e91dfd90591
- SHA512 651882e4972487df50a388664a4490f00674bc1009761d4f6db9cff4992ed53f739db6db0b257dc3805e8be495a742a18f7dad5e8478778a5d2c5f9e0e736145
- TLSH T1664136403AFD06A8F2FB9E72DEFB1790857BB9526DA0D11D0850814D1822700D5B7B27
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1G6DRU.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-1G6DRU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-1G6DRU.lnk
- Size 2KB
- SHA256 c7eb7eddf1e811d29dd54b9492986c78470ade5f514a8b96a1b5427ad5d415da
- MD5 6722cd310979f201f350c12b2f740af7
- SHA1 e1d62852f01bb6182d8131ec5e888e91dfd90591
- SHA512 651882e4972487df50a388664a4490f00674bc1009761d4f6db9cff4992ed53f739db6db0b257dc3805e8be495a742a18f7dad5e8478778a5d2c5f9e0e736145
- TLSH T1664136403AFD06A8F2FB9E72DEFB1790857BB9526DA0D11D0850814D1822700D5B7B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.