General
- Target DOC-JO1RB3.lnk
- Size 2KB
- Sample260803-v9df7svaqb
- SHA256 0a843992cb577eca596b63a52606a4fdb3d455120108af9fd2cb2fa7aaa31657
- MD5 d117c481f1f128dc1f1a2813c7abbcdf
- SHA1 bdfcd176d1d339b44cfe09a95edacee48ef4387f
- SHA512 5568d88cc4569dd261dfdd20e7186ca21b618e54a0f948ce0bd3214ad6f05a514a749e7b939e10be7a62f7baafc5fa498972232adfbec717d98f542a575bc645
- TLSH T1B541F2802AE90198F3FB8E76EDBE6B5545BBBD569DB0C64D0D40820D0822B00D577B73
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JO1RB3.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-JO1RB3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JO1RB3.lnk
- Size 2KB
- SHA256 0a843992cb577eca596b63a52606a4fdb3d455120108af9fd2cb2fa7aaa31657
- MD5 d117c481f1f128dc1f1a2813c7abbcdf
- SHA1 bdfcd176d1d339b44cfe09a95edacee48ef4387f
- SHA512 5568d88cc4569dd261dfdd20e7186ca21b618e54a0f948ce0bd3214ad6f05a514a749e7b939e10be7a62f7baafc5fa498972232adfbec717d98f542a575bc645
- TLSH T1B541F2802AE90198F3FB8E76EDBE6B5545BBBD569DB0C64D0D40820D0822B00D577B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.