General
- Target DOC-YCFHC2.zip
- Size 583B
- Sample260804-j74d3azyev
- SHA256 9185706407bfb71faea06f325748afb0029e5c9d51768b3444e90af70c9e37ea
- MD5 9869f3386acf4ed4f2ae3dc09aab6f54
- SHA1 2bd92621ad7283283b91f786d504c468a3fb1b14
- SHA512 66d46628a9d276e732953958a938fe504913de91fb0cbe0a7ccccc4e5468fb32144a2174b18cd223b43e53670f4d53d877474a20ce14c2184474ef336c41f8f1
- TLSH T12FF0E1731679B81AD89799FBD46777E543AD528EC633CFA8339CE08C8809821D9445C0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YCFHC2.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YCFHC2.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documntacion.lat/h/estagio1.php?r=3F1477F15398D1
Targets
-
- Target DOC-YCFHC2.lnk
- Size 1KB
- SHA256 bb226169cea019279045c211a2d2e9c43c6591898eb6966097d1e21c062909d2
- MD5 054d0925f4e8b8bfb7bf349b450e624f
- SHA1 4a487c7357d730ecebc8f4b2dabfa6d72afab5e5
- SHA512 f5ed79f2f6ac2d8da40ea7e964bdd9e2c6b13484aa2482709233e7008b4786d21ccb9194806e8fa69afd2e5728b754e43ea6bc05e0712aadf083f68551fe8603
- TLSH T1433147106FFD0664F3F79FB684BB5B1089BBB8568D20C62E4150854C1072A01E6BAF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.