General
- Target DOC-VAI6WE.zip
- Size 583B
- Sample260804-j74d3azyes
- SHA256 507fff7a2ba7b629bbbd8ac29037a76dd41715e3e5e9fd27a6895416fe7bd862
- MD5 508cbb0d2f812e8a64782809417e8111
- SHA1 9cec8049f71393ee6ff7ea247d871423f9ff0758
- SHA512 0c5d9d2e06cdb6df68fe20987b5ba5187f3d0f47e72da254e62980e833efb2908ceea98038c5a11de26481685a36cc4aa4317e075c9601f40c53b2bc17aef59c
- TLSH T108F047428AC3519CCC87D9FA39C53E268069391DCCC2D7594500AF0F7820A052559677
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VAI6WE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VAI6WE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-VAI6WE.lnk
- Size 1KB
- SHA256 172b1e8f0ed5e1ca2e3b49d1f6f30c4d2ef0613d35cf407225eb553e1de2d3b6
- MD5 677ab84771ad446a2e51c5a58510dc4e
- SHA1 0c7dba4f510898968e0284da827b3c4742aa81fc
- SHA512 ec9499a801aa7a7867bb9f7569e68fe5872328daa45176bb72389ec30ccfe72eadc9220e6ac6a8a5ac41370f939249a38ff581fa3658972c2612fe2990034470
- TLSH T13C3147103EFD0664F3F79F7694BB5B1089BBB86A8D14C61D0151854C1072A01EA7AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.