General
- Target DOC-2TPL4S.lnk
- Size 1KB
- Sample260803-v5fqrsda53
- SHA256 5eb38c85778bf658e4616dda997567f7b550144b933cf874d5c765ba89a37c8b
- MD5 c78ba1495b362317ef1dd61d67459cf1
- SHA1 52b7a899c8dc5bac255813afe25b347d54418aec
- SHA512 45d2827d7604bfda31858e02ba5ad4178bcf233df7f3836b6bb7b87e3a551113cf8ead5bb0dd807a120540c5031c17ef1542635aa9de43af2b4e95888cdfb636
- TLSH T11D3197103EEC0664F3B78EB288BBAB2096BFB9998D20CA2D0140450C1032A15E17AF77
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2TPL4S.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-2TPL4S.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-2TPL4S.lnk
- Size 1KB
- SHA256 5eb38c85778bf658e4616dda997567f7b550144b933cf874d5c765ba89a37c8b
- MD5 c78ba1495b362317ef1dd61d67459cf1
- SHA1 52b7a899c8dc5bac255813afe25b347d54418aec
- SHA512 45d2827d7604bfda31858e02ba5ad4178bcf233df7f3836b6bb7b87e3a551113cf8ead5bb0dd807a120540c5031c17ef1542635aa9de43af2b4e95888cdfb636
- TLSH T11D3197103EEC0664F3B78EB288BBAB2096BFB9998D20CA2D0140450C1032A15E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.