General
- Target DOC-N8C238.lnk
- Size 2KB
- Sample260803-znsffsff26
- SHA256 78711e1a3db9718cbaa05618c9a8def5979f36127ecd7bc2d27a52f533f12755
- MD5 ba00e5e9a1a7bede75dc80c506988445
- SHA1 5c61f9b511908567bf1b7841dac13b99ac87bac0
- SHA512 7c2c3b64622dbdfd5fba6b0eab183efeba5ba189aea263a5a4ea72e774b2b68d7dbda6e687652455b4d16c3e631fce53a85ec5ddf6b8c13da1bec80f278f8790
- TLSH T1434142907AE900A8F3BB9E77ECBE679048BBB8621C20D68D0950D24D1426B00D977B67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-N8C238.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-N8C238.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://k-documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-N8C238.lnk
- Size 2KB
- SHA256 78711e1a3db9718cbaa05618c9a8def5979f36127ecd7bc2d27a52f533f12755
- MD5 ba00e5e9a1a7bede75dc80c506988445
- SHA1 5c61f9b511908567bf1b7841dac13b99ac87bac0
- SHA512 7c2c3b64622dbdfd5fba6b0eab183efeba5ba189aea263a5a4ea72e774b2b68d7dbda6e687652455b4d16c3e631fce53a85ec5ddf6b8c13da1bec80f278f8790
- TLSH T1434142907AE900A8F3BB9E77ECBE679048BBB8621C20D68D0950D24D1426B00D977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.