General
- Target DOC-IGS0XN.lnk
- Size 1KB
- Sample260803-vpv6hstfma
- SHA256 7596a9c83434cce451e768b6bbfa900399759f74a09e76eae13cd6909aca1b1e
- MD5 31e2d847d01d18bad700933de3c4d2e0
- SHA1 9311de88e83ed558fe3a5014a7f111a94d5cda5e
- SHA512 7f4ecd1612d400689cbe2a2d31f30f0f8fae917c28fb186c320848870964078a5d91555eb1b29897e7b3170519331d16948ea6bb9ae39714fb09a978b2c951ac
- TLSH T1C63197402EEC0664F3F3CE7384BB5B2489BBB9958D20C62E0140454C1032A15E2BBF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IGS0XN.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-IGS0XN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-IGS0XN.lnk
- Size 1KB
- SHA256 7596a9c83434cce451e768b6bbfa900399759f74a09e76eae13cd6909aca1b1e
- MD5 31e2d847d01d18bad700933de3c4d2e0
- SHA1 9311de88e83ed558fe3a5014a7f111a94d5cda5e
- SHA512 7f4ecd1612d400689cbe2a2d31f30f0f8fae917c28fb186c320848870964078a5d91555eb1b29897e7b3170519331d16948ea6bb9ae39714fb09a978b2c951ac
- TLSH T1C63197402EEC0664F3F3CE7384BB5B2489BBB9958D20C62E0140454C1032A15E2BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.