General
- Target JustificantePDF2107-BSAUSL.zip
- Size 607B
- Sample260803-q1geaaae28
- SHA256 7a48be1c72c491910648f0217ba4aa6bb125421ff59fbb6b4044965f803b700e
- MD5 dd25be889ba6ddc3e101cb12ce87ed1a
- SHA1 9ad56568f4b9adee2e3c55391ff65f85220ba9c6
- SHA512 9632bd5dea8f0bc2d2b840486c949b065aaddc4225669387b836115de822d903c8f1b5d2ba758fbd44858e69f8e5c36e53fe7b42db5432cf9d68a1d612fb52a6
- TLSH T11DF00C6485B60C2AE419C8B8042BD66E8B8119A50C41A7DA77A6A06381A02BF8F8A300
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
JustificantePDF2107-BSAUSL.lnk
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
JustificantePDF2107-BSAUSL.lnk
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://doc-acess.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target JustificantePDF2107-BSAUSL.lnk
- Size 1KB
- SHA256 e928e55a9c73cf232339047277239f6a9e3e79beddc8cad48d665b8302680b8a
- MD5 832684867b213705739c8306af6391c1
- SHA1 23f3e68100b4302b1b750c010d0bf994034a341d
- SHA512 4a44d48bbd5d47c9d970bc7d83df471aba0acea64507da8631599a2d25d95452f6aaeb5eefb5bff9efd1422dc515aed8e95c1d478a8b5a4afd55e3839e42faa4
- TLSH T1CD317B503EFD0664F3B39E7688BB971049BB799A8D10CA2E0141854C5072A05E5BBF7B
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.