General
- Target DOC-PMJT3E.lnk
- Size 1KB
- Sample260803-w6eerswbph
- SHA256 71aabcfb753ba7de74cb5baa8838b06b19b28840f047ceb1b013a74bad75a891
- MD5 84f2379e767df022e9bfda816b463c6b
- SHA1 a7169212cd2b7936e416c791a3329767a255ad93
- SHA512 6f4f5c84314348fb4e4e04155dfeb1fe265f1a51b65eb499da430b2ff3232bbb0a196fb243436a833117cd4eb3b04e2f9537c11fe75596c92e9cb0a9ae2869ff
- TLSH T1E73164003EED0624F2F78E7388BB572086BAB8698D20C72E0040450C1422A15E53AFA7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PMJT3E.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-PMJT3E.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-PMJT3E.lnk
- Size 1KB
- SHA256 71aabcfb753ba7de74cb5baa8838b06b19b28840f047ceb1b013a74bad75a891
- MD5 84f2379e767df022e9bfda816b463c6b
- SHA1 a7169212cd2b7936e416c791a3329767a255ad93
- SHA512 6f4f5c84314348fb4e4e04155dfeb1fe265f1a51b65eb499da430b2ff3232bbb0a196fb243436a833117cd4eb3b04e2f9537c11fe75596c92e9cb0a9ae2869ff
- TLSH T1E73164003EED0624F2F78E7388BB572086BAB8698D20C72E0040450C1422A15E53AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.