General
- Target DOC-ANXAW4.lnk
- Size 1KB
- Sample260803-vfszsswtbt
- SHA256 8495146a4c1467c9afb3117067d8491e3ef657280d510bf8897e3dc0d9af0370
- MD5 351ca4ffdf6065c8e4b82fef4c483715
- SHA1 e64c329ed2cce34415516cd2f003b4afb933cfb1
- SHA512 a4e02d7c9bbeb5fe6242fef24e9dec4493e418039c9ea1ab74bf9c60384550f091f7b9e2476a3798cfe68454d4e3126975f84ee2a683012e578d56827b5e4f80
- TLSH T19B3147503EED0664F3B78F7694BB572485BBB85A8E20C62D0151454C5023A15E17AFA7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ANXAW4.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-ANXAW4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ANXAW4.lnk
- Size 1KB
- SHA256 8495146a4c1467c9afb3117067d8491e3ef657280d510bf8897e3dc0d9af0370
- MD5 351ca4ffdf6065c8e4b82fef4c483715
- SHA1 e64c329ed2cce34415516cd2f003b4afb933cfb1
- SHA512 a4e02d7c9bbeb5fe6242fef24e9dec4493e418039c9ea1ab74bf9c60384550f091f7b9e2476a3798cfe68454d4e3126975f84ee2a683012e578d56827b5e4f80
- TLSH T19B3147503EED0664F3B78F7694BB572485BBB85A8E20C62D0151454C5023A15E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.