General
- Target DOC-NHBAXL.lnk
- Size 2KB
- Sample260803-wd7wlsxtcy
- SHA256 f4c5bae9ce3ae005b744ba993ce54c34fe9644d1a1c6dc3d04ae85f5fa832495
- MD5 54223a3f3dbe1faedd6c47d609ae7e8a
- SHA1 f96fc138240173f4e84296055e47de6596911840
- SHA512 d72c82350e474f0cce434f60b905ee2c023eb583bc02d8cdaba74c82bb1c1bc177c0d7150fc673737fcff750710fb445352837effa27037f5a9b286d0e1e55e2
- TLSH T1AB414B903AED00A4F3FF8E76EDFA2B14597F78624DA1D58D0990804D1432F06D977B26
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NHBAXL.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-NHBAXL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-NHBAXL.lnk
- Size 2KB
- SHA256 f4c5bae9ce3ae005b744ba993ce54c34fe9644d1a1c6dc3d04ae85f5fa832495
- MD5 54223a3f3dbe1faedd6c47d609ae7e8a
- SHA1 f96fc138240173f4e84296055e47de6596911840
- SHA512 d72c82350e474f0cce434f60b905ee2c023eb583bc02d8cdaba74c82bb1c1bc177c0d7150fc673737fcff750710fb445352837effa27037f5a9b286d0e1e55e2
- TLSH T1AB414B903AED00A4F3FF8E76EDFA2B14597F78624DA1D58D0990804D1432F06D977B26
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.