General
- Target DOC-293QUK.zip
- Size 450B
- Sample260803-qyahysad67
- SHA256 4c3eed335f1d2d8da15efc02a673076d735b2adb822e6342543cf418dee7739a
- MD5 065fd56735929050ac0609190d849357
- SHA1 5af63b52c358ed4115db57f09e452c6fbbe4e4e5
- SHA512 fa8ae985d912da89f64fdbbba0883cd10e03700b71694c08127c705dd196466a1d97a519ef1f470cd3c233e715de4cd5c9bd0d06493a43a346e914cf354e5c23
- TLSH T1DBF05C7B811D728BD981BBBC9921BA819361D4F1174AE5235255B42348743448AB9849
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-293QUK.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-293QUK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://d4-documentacion.lat/h/estagio1.php?r=304660FD0688
Targets
-
- Target DOC-293QUK.lnk
- Size 665B
- SHA256 9d0f8bb8f4db9e66f18d34e2949f12bd3e1ff88eb85058cd3b847adea1bbf226
- MD5 f235af707f7f5f2b18b3e768e1a63e45
- SHA1 a61c5e77fdae3b7385af1e91cb211244d3158f45
- SHA512 571aef19f2ae4fe00c610064db13ea4eebe675f8aeb55605664252833456a388df0b411976ddf851dfca2ad19e7f3cc84f3293d4783e44662158d3645192efb9
- TLSH T1100155006DBD0A04E1B78F3AC0FF031589F939229D62DA280610464E2060A01F7BAF37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.