General
- Target DOC-MQAT76.lnk
- Size 1KB
- Sample260803-vja86awvav
- SHA256 549ca8595abbd7f346b176dcfc13e0f5cf8a7514f3a5f37147eb86606a0f6bc2
- MD5 0da3f0b006eee5a0348dc40d9c77a165
- SHA1 5ce5d144c29dfad83bbf8f00f071becaab3a0bfd
- SHA512 6424079c701d3e77f27c728db1d9b85ced9b66952aaea397bedc3551bb55ab9edc85d625a4660b433d049d7162d9d719421be26343849125ce14e4dcc3181a5d
- TLSH T1963147502FFD0664F3B38F7799BB572485BAB8568D20CA2E0141454C5032A15E57BF77
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MQAT76.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-MQAT76.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-MQAT76.lnk
- Size 1KB
- SHA256 549ca8595abbd7f346b176dcfc13e0f5cf8a7514f3a5f37147eb86606a0f6bc2
- MD5 0da3f0b006eee5a0348dc40d9c77a165
- SHA1 5ce5d144c29dfad83bbf8f00f071becaab3a0bfd
- SHA512 6424079c701d3e77f27c728db1d9b85ced9b66952aaea397bedc3551bb55ab9edc85d625a4660b433d049d7162d9d719421be26343849125ce14e4dcc3181a5d
- TLSH T1963147502FFD0664F3B38F7799BB572485BAB8568D20CA2E0141454C5032A15E57BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.