General
- Target DOC-H23APO.lnk
- Size 1KB
- Sample260803-v7ypcsda88
- SHA256 0938a56485d27e534bf19b0e40c921b9db79b39823b4afd54705d466f19b12cd
- MD5 9769d0cd4d35b23a6e0a1d542eb594ad
- SHA1 36fe41b662ce296a638c34e002ec3d910c893ed6
- SHA512 e1551126afa09aa31f34d4089184f530844aa547f2cc1609984ae515c9b00e18393e85048dd3cc6451de546ad2dc99162fc215f72bb2fd5f655a8cdebeb9e6e3
- TLSH T175319C002FFC0914F3B78E7388BB572445BBB8558E20C62D0041454C1032A15E23AF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-H23APO.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-H23APO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-H23APO.lnk
- Size 1KB
- SHA256 0938a56485d27e534bf19b0e40c921b9db79b39823b4afd54705d466f19b12cd
- MD5 9769d0cd4d35b23a6e0a1d542eb594ad
- SHA1 36fe41b662ce296a638c34e002ec3d910c893ed6
- SHA512 e1551126afa09aa31f34d4089184f530844aa547f2cc1609984ae515c9b00e18393e85048dd3cc6451de546ad2dc99162fc215f72bb2fd5f655a8cdebeb9e6e3
- TLSH T175319C002FFC0914F3B78E7388BB572445BBB8558E20C62D0041454C1032A15E23AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.