General
- Target DOC-74A8CD.lnk
- Size 1KB
- Sample260803-wlevssgq3s
- SHA256 345ac1e23c78beab4942814bebfa534baa12d5f2b9cb425b4a6fc9ed5c54f7af
- MD5 6d74d0116cd6919c256a855ce69acc57
- SHA1 188fb33d9602819d6a2a926ae33747a3b33c8909
- SHA512 c76e2daafedb7d719ab79fbf915cd490630fd568714cc76f5adaad3026eb96ebe23c1db716aad16bfadb5c64fb4ad2d4f9c18b8cc4bf534a49714a74a609c9be
- TLSH T1213197003FFD0624F3B38EB798BB572089BAB8958E20CA2E0040450C5132A19E17AF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-74A8CD.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-74A8CD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-74A8CD.lnk
- Size 1KB
- SHA256 345ac1e23c78beab4942814bebfa534baa12d5f2b9cb425b4a6fc9ed5c54f7af
- MD5 6d74d0116cd6919c256a855ce69acc57
- SHA1 188fb33d9602819d6a2a926ae33747a3b33c8909
- SHA512 c76e2daafedb7d719ab79fbf915cd490630fd568714cc76f5adaad3026eb96ebe23c1db716aad16bfadb5c64fb4ad2d4f9c18b8cc4bf534a49714a74a609c9be
- TLSH T1213197003FFD0624F3B38EB798BB572089BAB8958E20CA2E0040450C5132A19E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.