General
- Target DOC-08YYKG.lnk
- Size 2KB
- Sample260803-wjer1sgp6v
- SHA256 3ecd50a8688b13f5581ffdd56342110a2ff9b8dc328fa708dd7aa6ca4569771f
- MD5 1ce0bb609ebba004de8d2a72cd68ab9d
- SHA1 a3a5302abd76f663e218e9f8bf20606ae95eec08
- SHA512 739bdd15254cd6e1a48eccf8a1dd8dbb18b9c8465dbee129e883756134997e169fc15983ae9fdd0dcba7138e9aa87a9b34d8fd4df491617cf5587e47aeb7497c
- TLSH T1805158402AEA01D8F2BF9E32EDFE67E159BBB8213C31C55D0850814E1826B41E933F63
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-08YYKG.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-08YYKG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-08YYKG.lnk
- Size 2KB
- SHA256 3ecd50a8688b13f5581ffdd56342110a2ff9b8dc328fa708dd7aa6ca4569771f
- MD5 1ce0bb609ebba004de8d2a72cd68ab9d
- SHA1 a3a5302abd76f663e218e9f8bf20606ae95eec08
- SHA512 739bdd15254cd6e1a48eccf8a1dd8dbb18b9c8465dbee129e883756134997e169fc15983ae9fdd0dcba7138e9aa87a9b34d8fd4df491617cf5587e47aeb7497c
- TLSH T1805158402AEA01D8F2BF9E32EDFE67E159BBB8213C31C55D0850814E1826B41E933F63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.