General
- Target DOC-HCPZNU.lnk
- Size 2KB
- Sample260803-v6pp3agl8v
- SHA256 f60f96707dd62b4b33af9044c1b11c6eb9bdd4212fc88926427ea57a00132725
- MD5 6b5219cb97ab0fd78bacaad6a1ba2459
- SHA1 bbbc704311c87bc4c3f498d6983aff4f475489bf
- SHA512 a8c0923ac65e74b6aca1133cc768626dd492e8bb0538c14610a9974985fa626dfa7ec43bf37170ff630aa03fc1d7b9f5215a22386da8b380c2cbaf8b2109a14b
- TLSH T1134134A03AEE05D4F2BB8E33D9BF3B1188BB79525D65C99D0550820C4822B01E537B67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HCPZNU.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-HCPZNU.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-HCPZNU.lnk
- Size 2KB
- SHA256 f60f96707dd62b4b33af9044c1b11c6eb9bdd4212fc88926427ea57a00132725
- MD5 6b5219cb97ab0fd78bacaad6a1ba2459
- SHA1 bbbc704311c87bc4c3f498d6983aff4f475489bf
- SHA512 a8c0923ac65e74b6aca1133cc768626dd492e8bb0538c14610a9974985fa626dfa7ec43bf37170ff630aa03fc1d7b9f5215a22386da8b380c2cbaf8b2109a14b
- TLSH T1134134A03AEE05D4F2BB8E33D9BF3B1188BB79525D65C99D0550820C4822B01E537B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.