General
- Target DOC-4MPGVJ.lnk
- Size 2KB
- Sample260803-wfx47adc24
- SHA256 ff713cccd885a425cff950487453750525f8cbdb68abfcdf994da2b1d942cec8
- MD5 02c855cbc0f0e4ae0469e8ddf0d53884
- SHA1 90c21361d61751cfa0eec119cf58881ff93e94d9
- SHA512 561f983d4d6958d4822266cc072ed5e49e404629cce1051c32d2e1e7eff6a44bd956875357136697bc184dade1af70a109f624a88a6c872fb2bcf41fc804aa21
- TLSH T1384144943AEE4598F3BB8EB6EDFE670585BFBE514D61C28D0851820D4822B00D077B63
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4MPGVJ.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-4MPGVJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4MPGVJ.lnk
- Size 2KB
- SHA256 ff713cccd885a425cff950487453750525f8cbdb68abfcdf994da2b1d942cec8
- MD5 02c855cbc0f0e4ae0469e8ddf0d53884
- SHA1 90c21361d61751cfa0eec119cf58881ff93e94d9
- SHA512 561f983d4d6958d4822266cc072ed5e49e404629cce1051c32d2e1e7eff6a44bd956875357136697bc184dade1af70a109f624a88a6c872fb2bcf41fc804aa21
- TLSH T1384144943AEE4598F3BB8EB6EDFE670585BFBE514D61C28D0851820D4822B00D077B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.