General
- Target DOC-V0EG7H.lnk
- Size 2KB
- Sample260803-wjj2qsdc62
- SHA256 9b738545b64d6adc81b3da10f5dcdb930e48920a6920c018734d8e128df7a357
- MD5 d4c98229ab20586efb0cfc51f6d8865d
- SHA1 967c08f2419914380fe88b2a772497f37a8143e2
- SHA512 5d64a215593188c308bd072fb9258e8a43238d986975faf9ebb8d8973821d597540dbb0f210136769a62c166f8a168885adab233ec4d4fdb9938ec442f70285d
- TLSH T13C4134952EEA45DCF2FB8E72EC7E7B41497BFE225C20C58D0840920C0422B06E937B63
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-V0EG7H.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-V0EG7H.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-V0EG7H.lnk
- Size 2KB
- SHA256 9b738545b64d6adc81b3da10f5dcdb930e48920a6920c018734d8e128df7a357
- MD5 d4c98229ab20586efb0cfc51f6d8865d
- SHA1 967c08f2419914380fe88b2a772497f37a8143e2
- SHA512 5d64a215593188c308bd072fb9258e8a43238d986975faf9ebb8d8973821d597540dbb0f210136769a62c166f8a168885adab233ec4d4fdb9938ec442f70285d
- TLSH T13C4134952EEA45DCF2FB8E72EC7E7B41497BFE225C20C58D0840920C0422B06E937B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.