General
- Target DOC-DNU4CJ.lnk
- Size 1KB
- Sample260803-wdh79axtbv
- SHA256 50b8e09705c911c34d585b3dfc2997f0e4de144e29bbb21453671ac20f646065
- MD5 bd0951536f31571fbff918abb4e554cd
- SHA1 2d8d7c5762a7ae9161099108ebfd112d432ed49d
- SHA512 a2174f36d87567d39c5295a00022c060fd9f4e74c77f0cba01e0b01199b654ab2094660d6abea8341fb6e1f8de7f34457db7bfccb961e6db4b7d4801618b1d27
- TLSH T17231CB003FED0A24F3F38F7394BB672485BBB8A68D20CA2D0041454C5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DNU4CJ.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-DNU4CJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DNU4CJ.lnk
- Size 1KB
- SHA256 50b8e09705c911c34d585b3dfc2997f0e4de144e29bbb21453671ac20f646065
- MD5 bd0951536f31571fbff918abb4e554cd
- SHA1 2d8d7c5762a7ae9161099108ebfd112d432ed49d
- SHA512 a2174f36d87567d39c5295a00022c060fd9f4e74c77f0cba01e0b01199b654ab2094660d6abea8341fb6e1f8de7f34457db7bfccb961e6db4b7d4801618b1d27
- TLSH T17231CB003FED0A24F3F38F7394BB672485BBB8A68D20CA2D0041454C5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.