General
- Target DOC-NDP6QN.lnk
- Size 2KB
- Sample260803-zd2alsxdph
- SHA256 4bbf2da2930d19e3ff44bb7a98599643bacd1949ca7822964cae462c3430af01
- MD5 f0be7a7497e1f3ad449b3628a3321f20
- SHA1 39e23146c4aa2702ad26ce6b9f08bda4a9c1e87f
- SHA512 3759092d0c4c056683adfd1b555867af7a0db51f4a02f84d0b2c77443841addf872042728927959947c678a3271eaf9a958db2b8d1247ec4d090c33cfbb8fa88
- TLSH T1B641365039F910E4E2BB8F76DDFF27544A7BBC615E60D58D4940810D1822B01D977B7B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NDP6QN.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-NDP6QN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-NDP6QN.lnk
- Size 2KB
- SHA256 4bbf2da2930d19e3ff44bb7a98599643bacd1949ca7822964cae462c3430af01
- MD5 f0be7a7497e1f3ad449b3628a3321f20
- SHA1 39e23146c4aa2702ad26ce6b9f08bda4a9c1e87f
- SHA512 3759092d0c4c056683adfd1b555867af7a0db51f4a02f84d0b2c77443841addf872042728927959947c678a3271eaf9a958db2b8d1247ec4d090c33cfbb8fa88
- TLSH T1B641365039F910E4E2BB8F76DDFF27544A7BBC615E60D58D4940810D1822B01D977B7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.