General
- Target DOC-DE1DNN.lnk
- Size 1KB
- Sample260803-vm41msteqd
- SHA256 5b92811f1732ddc25da8c2edc4351ef85b314031eb0202f86af01d2f6ad48b1a
- MD5 b031b3d233f8ec3d8c9a32072a2d04fa
- SHA1 3e4b91825940ae41469aca18c19b0c390f3fa703
- SHA512 dea861cd790dd661443036e0e588bbf2c0bc5f31fcd0cbd124a5f645ecf742efa9f1d6e250abe7442715b576826738b022b1088394aaaae63b945827743f7a75
- TLSH T1D93147503EED0624F3B78FB794BB572485BAB8668E20CA2E0141494D5032A19E17AF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DE1DNN.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-DE1DNN.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DE1DNN.lnk
- Size 1KB
- SHA256 5b92811f1732ddc25da8c2edc4351ef85b314031eb0202f86af01d2f6ad48b1a
- MD5 b031b3d233f8ec3d8c9a32072a2d04fa
- SHA1 3e4b91825940ae41469aca18c19b0c390f3fa703
- SHA512 dea861cd790dd661443036e0e588bbf2c0bc5f31fcd0cbd124a5f645ecf742efa9f1d6e250abe7442715b576826738b022b1088394aaaae63b945827743f7a75
- TLSH T1D93147503EED0624F3B78FB794BB572485BAB8668E20CA2E0141494D5032A19E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.