General
- Target DOC-TUGQS6.lnk
- Size 1KB
- Sample260803-w18reswalh
- SHA256 d2ac086062b65fa01a3600596141c09245f81e3cee7f3d713fb5290eabcbba09
- MD5 5b5c10edf4f487fd0c4ab4299cbd3490
- SHA1 b8f7e0b326a694375f052be5ae0472a01cf5cf5b
- SHA512 d1128d5e44fcb00db9f026ba3f142abb29331f59729da44f8f615620c55abf2eb8f8a645420380977cd6b2ec63af55a47a5071908cc55e5fe27e85f5a71eeaba
- TLSH T16B3147503EFD0664F3F79F7794BB572485BBB8558D20C62D0141454C5432A25E13AFA7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TUGQS6.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-TUGQS6.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-TUGQS6.lnk
- Size 1KB
- SHA256 d2ac086062b65fa01a3600596141c09245f81e3cee7f3d713fb5290eabcbba09
- MD5 5b5c10edf4f487fd0c4ab4299cbd3490
- SHA1 b8f7e0b326a694375f052be5ae0472a01cf5cf5b
- SHA512 d1128d5e44fcb00db9f026ba3f142abb29331f59729da44f8f615620c55abf2eb8f8a645420380977cd6b2ec63af55a47a5071908cc55e5fe27e85f5a71eeaba
- TLSH T16B3147503EFD0664F3F79F7794BB572485BBB8558D20C62D0141454C5432A25E13AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.