General
- Target DOC-DQ1AJC.lnk
- Size 1KB
- Sample260803-vdd3vscd73
- SHA256 27c683d1a69a636b1b3a2e3506db04e4e3a00e56ba704032d6d474d24c5e6968
- MD5 f447fd66889c3df32015d5cd3c1413a9
- SHA1 882fe5bb8e7fdb783b02b127d23ed7f82feefe34
- SHA512 01557bb19dbfdff1067fd558167610d9dc2c825ae918b229b77f944ccc1d3c43fe5a6c84e13cee5cd3cbbc3e63243c8a97a577e51e0b5661da819c71f979a35d
- TLSH T1373197003EEC0A24F3F38FB298BB572085BAB9A68D20CA2D0041450C5132A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DQ1AJC.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-DQ1AJC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DQ1AJC.lnk
- Size 1KB
- SHA256 27c683d1a69a636b1b3a2e3506db04e4e3a00e56ba704032d6d474d24c5e6968
- MD5 f447fd66889c3df32015d5cd3c1413a9
- SHA1 882fe5bb8e7fdb783b02b127d23ed7f82feefe34
- SHA512 01557bb19dbfdff1067fd558167610d9dc2c825ae918b229b77f944ccc1d3c43fe5a6c84e13cee5cd3cbbc3e63243c8a97a577e51e0b5661da819c71f979a35d
- TLSH T1373197003EEC0A24F3F38FB298BB572085BAB9A68D20CA2D0041450C5132A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.