General
- Target DOC-G77D4M.lnk
- Size 2KB
- Sample260803-w455psysew
- SHA256 735b69c3f291ad3880f41f13070565cf2e840aa941742bbe1ba37b53c39db3a9
- MD5 21dd448209d57637279acb4c8c77a2cd
- SHA1 feebd0ce6bac4cb8fad85bba0bc410555869f8e3
- SHA512 faa21a52070a9c734e353436994fc4d85e7792ec3132ef9e5e894e13332b6cb7d6ebe9e245ab23541dcf8f2d590574ecc658df251a38b092953da54584306a9d
- TLSH T1EF4132403EEA05E4F2BA8F76EAFE27114A7BB9556D30C29E0850810D0927B09D977B37
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G77D4M.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-G77D4M.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-G77D4M.lnk
- Size 2KB
- SHA256 735b69c3f291ad3880f41f13070565cf2e840aa941742bbe1ba37b53c39db3a9
- MD5 21dd448209d57637279acb4c8c77a2cd
- SHA1 feebd0ce6bac4cb8fad85bba0bc410555869f8e3
- SHA512 faa21a52070a9c734e353436994fc4d85e7792ec3132ef9e5e894e13332b6cb7d6ebe9e245ab23541dcf8f2d590574ecc658df251a38b092953da54584306a9d
- TLSH T1EF4132403EEA05E4F2BA8F76EAFE27114A7BB9556D30C29E0850810D0927B09D977B37
- MD5 SHA1 SHA512 TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.