General
- Target DOC-M1NBMF.lnk
- Size 1KB
- Sample260803-wtaaaaxxbx
- SHA256 7a8a9addf9425c772dfe77a3e836f8ca0c0f8594e445439003c4ab9c7ee3f309
- MD5 2a88062177497cca013d499a11c0267d
- SHA1 01786c628d3506daec4e6fac8ed46055900818bc
- SHA512 c4edf5e72d763604bee1ebdda0f81c3f5e6452e4e6a03443972be4359e0217fd32a7627f2ed9a4dfbd6610c29a1eded6c74cba28643d7fc6cbb9d30ab10fb9f0
- TLSH T1E731CB503FFC0664F3F38F7798BB572485BBB99A8D20C62D0041450C1032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M1NBMF.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-M1NBMF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-M1NBMF.lnk
- Size 1KB
- SHA256 7a8a9addf9425c772dfe77a3e836f8ca0c0f8594e445439003c4ab9c7ee3f309
- MD5 2a88062177497cca013d499a11c0267d
- SHA1 01786c628d3506daec4e6fac8ed46055900818bc
- SHA512 c4edf5e72d763604bee1ebdda0f81c3f5e6452e4e6a03443972be4359e0217fd32a7627f2ed9a4dfbd6610c29a1eded6c74cba28643d7fc6cbb9d30ab10fb9f0
- TLSH T1E731CB503FFC0664F3F38F7798BB572485BBB99A8D20C62D0041450C1032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.