General
- Target DOC-MND9LU.lnk
- Size 1KB
- Sample260803-vwtw2atgla
- SHA256 aee289f3a7c340bb0ca9554fccdb2a408630da1bc6e97c575d98af0497e6f331
- MD5 324a1e90dcfa1804f8e1076e119ad791
- SHA1 90b9685e781b13187823ed39100605ee16b4fb0e
- SHA512 7b2abef024138de4cbaf08fe3d769f3121ff8adf12e66207dccbf69b54c9cd7c09d924bb87f9d38bada087694ff2f86aad0ce85d21dc0d799ea8f6b5181e09d8
- TLSH T1813197003EFC0624F3B38E7388BB572485FAB95A8D20CA2E0051454C5032A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MND9LU.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-MND9LU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-MND9LU.lnk
- Size 1KB
- SHA256 aee289f3a7c340bb0ca9554fccdb2a408630da1bc6e97c575d98af0497e6f331
- MD5 324a1e90dcfa1804f8e1076e119ad791
- SHA1 90b9685e781b13187823ed39100605ee16b4fb0e
- SHA512 7b2abef024138de4cbaf08fe3d769f3121ff8adf12e66207dccbf69b54c9cd7c09d924bb87f9d38bada087694ff2f86aad0ce85d21dc0d799ea8f6b5181e09d8
- TLSH T1813197003EFC0624F3B38E7388BB572485FAB95A8D20CA2E0051454C5032A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.