General
- Target DOC-F3V9I9.lnk
- Size 2KB
- Sample260803-ve34datdlb
- SHA256 c9f2882c847368b914a7972f9ae3c7b07ec3cb1becb2320489c118c1b2554605
- MD5 f1e4f958ba8215f01a91a0b25a11c55d
- SHA1 60fd5b3b76dd52a6efdf11973324c67d4d9d298d
- SHA512 0b5bd1dc28eb0c3b06ae25db455750e9ca87427966c546b4f6c46133fecd9e867de1417c0784765c0fb097cdc1fc4f92740089fab852c1ce6ae8f3e31ed590dd
- TLSH T1344166803FDA4594F2FB8E36ACFB675489BBB9950E60C5AE0450810E5432F01E977B26
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-F3V9I9.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-F3V9I9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-F3V9I9.lnk
- Size 2KB
- SHA256 c9f2882c847368b914a7972f9ae3c7b07ec3cb1becb2320489c118c1b2554605
- MD5 f1e4f958ba8215f01a91a0b25a11c55d
- SHA1 60fd5b3b76dd52a6efdf11973324c67d4d9d298d
- SHA512 0b5bd1dc28eb0c3b06ae25db455750e9ca87427966c546b4f6c46133fecd9e867de1417c0784765c0fb097cdc1fc4f92740089fab852c1ce6ae8f3e31ed590dd
- TLSH T1344166803FDA4594F2FB8E36ACFB675489BBB9950E60C5AE0450810E5432F01E977B26
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.