General
- Target DOC-4XLAQA.lnk
- Size 1KB
- Sample260803-wp6spavdmf
- SHA256 9fc7d9edb5cdccebf35f9ba6a074ac72c6c711ffbd294903d32c30954869bae9
- MD5 79ec77ebabacd77ac4ec55503d829c7d
- SHA1 95c9b2cdf9d654c2384936b4912fc86e5931e84b
- SHA512 4e3ca0b5222c58809156fbd6d6f7262bc9a108d66653b3ac07da6cc48a99d1578bb1eeb39011bd47e749578a44a934061d113e4e5163edde28964d4d0412b191
- TLSH T117317B503FFD0624F3F38F7794BB572486BBB8968E24DA2D4141454C5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4XLAQA.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-4XLAQA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4XLAQA.lnk
- Size 1KB
- SHA256 9fc7d9edb5cdccebf35f9ba6a074ac72c6c711ffbd294903d32c30954869bae9
- MD5 79ec77ebabacd77ac4ec55503d829c7d
- SHA1 95c9b2cdf9d654c2384936b4912fc86e5931e84b
- SHA512 4e3ca0b5222c58809156fbd6d6f7262bc9a108d66653b3ac07da6cc48a99d1578bb1eeb39011bd47e749578a44a934061d113e4e5163edde28964d4d0412b191
- TLSH T117317B503FFD0624F3F38F7794BB572486BBB8968E24DA2D4141454C5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.