General
- Target DOC-9QOQSA.lnk
- Size 2KB
- Sample260803-wsqwmsvelf
- SHA256 5ec8ea9af2d7a8efcf22bdf4a81f57df7fc1e4feb9a938e8b4195340cb08d2ba
- MD5 ceee64ee8fd61996a9b233bde3d34d79
- SHA1 524b4065c7f94f7e33de8bd63f90f0271c98568c
- SHA512 073b47c77612c493be19c1b89250614389ecd440f7798ccb3e458616ff8c5bacb5e1e2bfc93517a05f485cd90aac229862779f14d3a6259886087595a5bf4757
- TLSH T1624128903AEC40D4F2BE9E72EDFE674555BBB9555DB6C38D0D40810D0821B00D97A777
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9QOQSA.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-9QOQSA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9QOQSA.lnk
- Size 2KB
- SHA256 5ec8ea9af2d7a8efcf22bdf4a81f57df7fc1e4feb9a938e8b4195340cb08d2ba
- MD5 ceee64ee8fd61996a9b233bde3d34d79
- SHA1 524b4065c7f94f7e33de8bd63f90f0271c98568c
- SHA512 073b47c77612c493be19c1b89250614389ecd440f7798ccb3e458616ff8c5bacb5e1e2bfc93517a05f485cd90aac229862779f14d3a6259886087595a5bf4757
- TLSH T1624128903AEC40D4F2BE9E72EDFE674555BBB9555DB6C38D0D40810D0821B00D97A777
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.