General
- Target DOC-HQS64L.lnk
- Size 1KB
- Sample260803-w68cvahn6v
- SHA256 23b4ff36413fbeccde8da584aa8e970298aa48d66888a2f92ec74de0bec2ea90
- MD5 9e65ca321076a3278eaccaefd5e245c6
- SHA1 78d062e5526c1890b2483abcf4e4fd0c72bb1e14
- SHA512 c82d39470bb9fec0a2af76b911649810ea80e2e9d2d70741a11cddb540a3881df97302cc776cbd9af5d9799bed39b12768cffd622121631fb9b49e7ce3aa79c9
- TLSH T1A5319C403EEC0518F3B78F7698FB572445BBB8A58E20C62D4140490C5062A15E17AF6B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HQS64L.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-HQS64L.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-HQS64L.lnk
- Size 1KB
- SHA256 23b4ff36413fbeccde8da584aa8e970298aa48d66888a2f92ec74de0bec2ea90
- MD5 9e65ca321076a3278eaccaefd5e245c6
- SHA1 78d062e5526c1890b2483abcf4e4fd0c72bb1e14
- SHA512 c82d39470bb9fec0a2af76b911649810ea80e2e9d2d70741a11cddb540a3881df97302cc776cbd9af5d9799bed39b12768cffd622121631fb9b49e7ce3aa79c9
- TLSH T1A5319C403EEC0518F3B78F7698FB572445BBB8A58E20C62D4140490C5062A15E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.