General
- Target DOC-XAP3O9.zip
- Size 454B
- Sample260803-qyahyscm7y
- SHA256 6028fc4de7dacd08ccfb3de6ba3393969b858d0f6e39c6f8ff3a6b3d6c419e03
- MD5 26da7049608751b5e83401ce040fdaa2
- SHA1 a761f9ad840427d5ec14262474f9e375e7705ac6
- SHA512 03ecac8077fe141851a747848271f43848c6c1aeba265b1c981df213148609fa4738d47e4faca139cad03059ed9401d2492bf968a02a9c13e469cb1d650bc304
- TLSH T1D5F0A3D741511000D516D6FE37685FC283475C05106E9FB79C5AEBEC0D751881516D75
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XAP3O9.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XAP3O9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://d4-documentacion.lat/h/estagio1.php?r=304660FD0688
Targets
-
- Target DOC-XAP3O9.lnk
- Size 673B
- SHA256 6c4baa3de2e086bb485105ce7090ddce07aec74d45a246d689c4bd9e9e306463
- MD5 ebf294dd88557efcef17bd694516052a
- SHA1 1f1e6ef7d8ec904329b326803ebe39e909b86a4b
- SHA512 a8861b296e60e21f1b5de1aa8bc59309b4e173a1fcd2c7c0fbcb56204ddc9ee0dbf660cb5939c0773e82599b6908b2a6d76ceae5137bb847d93e991f85a0ea2e
- TLSH T17B015C407CAD4544E1B38F7BC0EF271189BD3A129D61EA3C4110464E2120901F675F37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.