General
- Target DOC-J0LCWQ.lnk
- Size 1KB
- Sample260803-vyc2asgk2s
- SHA256 b3d88b826fba259454b69209e4b4b022b5384891cb922755bd85d60831e4f55c
- MD5 7626b8d5c96ccdfb4165557a93f4ea3e
- SHA1 df311422ffab59158f89052cb21f747fa0bd39c4
- SHA512 f12030e491f5d3fd8c610b04c417180da186b89424f50d2127551b699bae32a7ca0b7455fc8a432a714dcdf56826d644a4b88309d36f4ac439a9298cd9cdaa98
- TLSH T11B3197003EFD0664F3B38E7395BB572085BAB8568D20C62D0040454C1032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-J0LCWQ.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-J0LCWQ.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-J0LCWQ.lnk
- Size 1KB
- SHA256 b3d88b826fba259454b69209e4b4b022b5384891cb922755bd85d60831e4f55c
- MD5 7626b8d5c96ccdfb4165557a93f4ea3e
- SHA1 df311422ffab59158f89052cb21f747fa0bd39c4
- SHA512 f12030e491f5d3fd8c610b04c417180da186b89424f50d2127551b699bae32a7ca0b7455fc8a432a714dcdf56826d644a4b88309d36f4ac439a9298cd9cdaa98
- TLSH T11B3197003EFD0664F3B38E7395BB572085BAB8568D20C62D0040454C1032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.