General
- Target DOC-1P91M2.lnk
- Size 2KB
- Sample260803-vpczyacf59
- SHA256 6e012f1d229f2288126b88ed09cf20ebf74fde78ee0b576ca6407b2260d3a2e1
- MD5 92b79c707cde0cbce04ae77a9f067b94
- SHA1 4863bd82d54c4dc58bd1456eb2801989707327a2
- SHA512 c29b9734c14420cd71c2348a748014baa67934709f1cce58b92e01bee5559241d57e239f83599cfab17c956911ff156ec14198c727046b4378dc227e4040bae2
- TLSH T1F34106907AED41A8F2BFDE32DDBE775249BFBA125D25C61D0840C14C0922B01E537B67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1P91M2.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-1P91M2.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-1P91M2.lnk
- Size 2KB
- SHA256 6e012f1d229f2288126b88ed09cf20ebf74fde78ee0b576ca6407b2260d3a2e1
- MD5 92b79c707cde0cbce04ae77a9f067b94
- SHA1 4863bd82d54c4dc58bd1456eb2801989707327a2
- SHA512 c29b9734c14420cd71c2348a748014baa67934709f1cce58b92e01bee5559241d57e239f83599cfab17c956911ff156ec14198c727046b4378dc227e4040bae2
- TLSH T1F34106907AED41A8F2BFDE32DDBE775249BFBA125D25C61D0840C14C0922B01E537B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.