General
- Target DOC-1CFB1D.lnk
- Size 2KB
- Sample260803-v4cbyswze1
- SHA256 50484eda3037528b3d52c95806671d2e32f4227e2901568ded8f233d75fc37ae
- MD5 f967939a79efd67aaf255c9d776b584c
- SHA1 44a8e1de3401a8d4cca82ee372a22a5f0017580d
- SHA512 14d02742f3c59ede1f1659557db08cb3ad1e71f42a0ddfd4c6968772f83468158ee04d815651085abd5fe17c7b82dc68022346cca25fc5089af509901305b519
- TLSH T104418B502BED01D8F3BA8E76EDFA3B11857BB9528D65C59E0800814C1422B01E57BB67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1CFB1D.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-1CFB1D.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-1CFB1D.lnk
- Size 2KB
- SHA256 50484eda3037528b3d52c95806671d2e32f4227e2901568ded8f233d75fc37ae
- MD5 f967939a79efd67aaf255c9d776b584c
- SHA1 44a8e1de3401a8d4cca82ee372a22a5f0017580d
- SHA512 14d02742f3c59ede1f1659557db08cb3ad1e71f42a0ddfd4c6968772f83468158ee04d815651085abd5fe17c7b82dc68022346cca25fc5089af509901305b519
- TLSH T104418B502BED01D8F3BA8E76EDFA3B11857BB9528D65C59E0800814C1422B01E57BB67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.