General
- Target DOC-3QJHE5.lnk
- Size 2KB
- Sample260803-vx3wbswyct
- SHA256 d9372a8cbdf045862e13204765d16c300364fdc066d0aed82ba9a12a48559ec0
- MD5 c1db9951a07fe594a1dba43393aa2f56
- SHA1 82ee5fe8c6421de40f4e387fc72d869618a2ca20
- SHA512 a843ac9c6946919395556b2e52025c6a6c00ddfa7378d3a0197654ed381ed736b1aef0d13affa2f27495feab7fd2f4647160fc3436f3f71af6e787db324687da
- TLSH T1905105942AE904E8F3BE9E32EDFE6B90897FB9516DB1C55D0C40C10C1832B41D8B3B66
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3QJHE5.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-3QJHE5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-3QJHE5.lnk
- Size 2KB
- SHA256 d9372a8cbdf045862e13204765d16c300364fdc066d0aed82ba9a12a48559ec0
- MD5 c1db9951a07fe594a1dba43393aa2f56
- SHA1 82ee5fe8c6421de40f4e387fc72d869618a2ca20
- SHA512 a843ac9c6946919395556b2e52025c6a6c00ddfa7378d3a0197654ed381ed736b1aef0d13affa2f27495feab7fd2f4647160fc3436f3f71af6e787db324687da
- TLSH T1905105942AE904E8F3BE9E32EDFE6B90897FB9516DB1C55D0C40C10C1832B41D8B3B66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.