General
- Target DOC-4SJ2IM.lnk
- Size 2KB
- Sample260803-vaxe2afn2t
- SHA256 c5affdf8f5813918b3cb42275d2c2521287be2293d44c96c3c55d9ffacfb0dd1
- MD5 e7045e35bcdacd3a475813869c486642
- SHA1 b569c6f564c574d8ebdd7296284c3b3e18862660
- SHA512 d792a63fd0ac7520a1394268eaa4ffc062c66b36c81d7d4e44475644c1bc2510920d36192a2607a9dc5682f153b67681995204542ede8164f45aa1db886d55ad
- TLSH T1FC4147903AE801DDF2FA8E33EDFE6B5548BFF852ADA0C58D0900824D0821B05D677B67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4SJ2IM.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-4SJ2IM.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4SJ2IM.lnk
- Size 2KB
- SHA256 c5affdf8f5813918b3cb42275d2c2521287be2293d44c96c3c55d9ffacfb0dd1
- MD5 e7045e35bcdacd3a475813869c486642
- SHA1 b569c6f564c574d8ebdd7296284c3b3e18862660
- SHA512 d792a63fd0ac7520a1394268eaa4ffc062c66b36c81d7d4e44475644c1bc2510920d36192a2607a9dc5682f153b67681995204542ede8164f45aa1db886d55ad
- TLSH T1FC4147903AE801DDF2FA8E33EDFE6B5548BFF852ADA0C58D0900824D0821B05D677B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.