General
- Target DOC-ZP1RKR.lnk
- Size 2KB
- Sample260803-zlagvsfe64
- SHA256 8bda91d288cac01c269cd55aefe08d3007c291c97300c44e5b7277ed8dbed6fc
- MD5 1caaf375cb527414b646267b7dc15c31
- SHA1 9f696b26d788473373a47f738e7ebd24d958189b
- SHA512 09e7f1240d0582a53da84ac6ff303d7622ec9f233960d355d3d75c3389eb5e3de7d8a3d38136796c3024df75ebea31ad1a1fc49145323f52128e2d3a2bdd1e43
- TLSH T1554166502AEA01E8F3BA8E72D9FA2754487BBC568DA0CA9D0940C10D1423B51D677B27
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZP1RKR.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-ZP1RKR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-ZP1RKR.lnk
- Size 2KB
- SHA256 8bda91d288cac01c269cd55aefe08d3007c291c97300c44e5b7277ed8dbed6fc
- MD5 1caaf375cb527414b646267b7dc15c31
- SHA1 9f696b26d788473373a47f738e7ebd24d958189b
- SHA512 09e7f1240d0582a53da84ac6ff303d7622ec9f233960d355d3d75c3389eb5e3de7d8a3d38136796c3024df75ebea31ad1a1fc49145323f52128e2d3a2bdd1e43
- TLSH T1554166502AEA01E8F3BA8E72D9FA2754487BBC568DA0CA9D0940C10D1423B51D677B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.