General
- Target DOC-1YRPUN.lnk
- Size 1KB
- Sample260803-vas3lsfm9w
- SHA256 4b1057472f60343e8d339f1e10678a6da3b3fa0eb6254973de80a8ac4f67fe49
- MD5 d5d611444f610141f8c89232da5b9c04
- SHA1 7ee26d2d30f341489722b37a8d36b12a5a2e9ded
- SHA512 c30e6c5d094423ef0599711e8db5f914577d9b938460be3a6bfe3220b2266e2b1340261feb18a69f09e823c2a96700340ac20a27635bf1506874769847b5bd22
- TLSH T1AE3197003FFD0664F3F79F7685BB572089BAB8598D20C72E0041460C5062A15E13AF7B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1YRPUN.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-1YRPUN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-1YRPUN.lnk
- Size 1KB
- SHA256 4b1057472f60343e8d339f1e10678a6da3b3fa0eb6254973de80a8ac4f67fe49
- MD5 d5d611444f610141f8c89232da5b9c04
- SHA1 7ee26d2d30f341489722b37a8d36b12a5a2e9ded
- SHA512 c30e6c5d094423ef0599711e8db5f914577d9b938460be3a6bfe3220b2266e2b1340261feb18a69f09e823c2a96700340ac20a27635bf1506874769847b5bd22
- TLSH T1AE3197003FFD0664F3F79F7685BB572089BAB8598D20C72E0041460C5062A15E13AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.