General
- Target DOC-S570KA.lnk
- Size 2KB
- Sample260803-zees1axdrg
- SHA256 bfded600f32b943f14839d8c36d34b931399d605d4c12621824f5e88023c7417
- MD5 e2026695df01852c32284cb6eda80fca
- SHA1 58990405a48e2745f8c532abf6e86e40811cbfe8
- SHA512 4aaeaa489181660046bf8e6fdfcbb1a812080bfe3ed0aec0d8bfc5a837c4889e51966110dacc5cd7e43f9aa77e6f0af6f12830576d15f15846ed3f00cea6c68f
- TLSH T1C25108902EE904A8F2FE5E36EDFF2741497BB9605DA0C58D4D41C10E1422B01D5B7B63
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-S570KA.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-S570KA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-S570KA.lnk
- Size 2KB
- SHA256 bfded600f32b943f14839d8c36d34b931399d605d4c12621824f5e88023c7417
- MD5 e2026695df01852c32284cb6eda80fca
- SHA1 58990405a48e2745f8c532abf6e86e40811cbfe8
- SHA512 4aaeaa489181660046bf8e6fdfcbb1a812080bfe3ed0aec0d8bfc5a837c4889e51966110dacc5cd7e43f9aa77e6f0af6f12830576d15f15846ed3f00cea6c68f
- TLSH T1C25108902EE904A8F2FE5E36EDFF2741497BB9605DA0C58D4D41C10E1422B01D5B7B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.