General
- Target DOC-XLE3Z9.lnk
- Size 2KB
- Sample260803-vkjxpace54
- SHA256 486e00412b3cf7a5b62ec9a93d8181c685772fb7e71b53519769744140ca2efe
- MD5 8ae08b1758ae2cac0605ee83cee8d194
- SHA1 30d4410e58fb1b51aea7f1a3a26a3c5dc1b69496
- SHA512 d15ca20a9e5228d75f4097bbddec17e3d520a66b78538ccf0d6cceeb6c9e3a085bdc6ee42ae91b262e0ce24d8a21523fa10049b4bd9b15b9a4cfedce5af60249
- TLSH T1F94153902BEE44A4F3FB9FB2DCBE2B54897B78951D21D4CD0880810C4421B05D977BA2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XLE3Z9.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-XLE3Z9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-XLE3Z9.lnk
- Size 2KB
- SHA256 486e00412b3cf7a5b62ec9a93d8181c685772fb7e71b53519769744140ca2efe
- MD5 8ae08b1758ae2cac0605ee83cee8d194
- SHA1 30d4410e58fb1b51aea7f1a3a26a3c5dc1b69496
- SHA512 d15ca20a9e5228d75f4097bbddec17e3d520a66b78538ccf0d6cceeb6c9e3a085bdc6ee42ae91b262e0ce24d8a21523fa10049b4bd9b15b9a4cfedce5af60249
- TLSH T1F94153902BEE44A4F3FB9FB2DCBE2B54897B78951D21D4CD0880810C4421B05D977BA2
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.