General
- Target DOC-8AE9BN.lnk
- Size 1KB
- Sample260803-wffvxagn7y
- SHA256 51e7ce1ab41694dd5a55074b5354183adedd8b2d5f3d0a0ada251d3801fa69e3
- MD5 418255e6927da6a8ec907e7c4b1ba948
- SHA1 a2e7bab89eb85f1c28ae49111824a23803965f2b
- SHA512 788478d4b8d6e62f9e51358bbd9633bddf6a9758ab7c0e8a8acafbd17bd12270e70b7f708ba8a50c375609f71394fa27cf19f1548949db6fec583173f08e82cc
- TLSH T1543197103FEC0624F3B78E7788BB572885BFB8558E20CA2E0141450C1032A15E53BF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8AE9BN.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-8AE9BN.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8AE9BN.lnk
- Size 1KB
- SHA256 51e7ce1ab41694dd5a55074b5354183adedd8b2d5f3d0a0ada251d3801fa69e3
- MD5 418255e6927da6a8ec907e7c4b1ba948
- SHA1 a2e7bab89eb85f1c28ae49111824a23803965f2b
- SHA512 788478d4b8d6e62f9e51358bbd9633bddf6a9758ab7c0e8a8acafbd17bd12270e70b7f708ba8a50c375609f71394fa27cf19f1548949db6fec583173f08e82cc
- TLSH T1543197103FEC0624F3B78E7788BB572885BFB8558E20CA2E0141450C1032A15E53BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.