General
- Target DOC-69LTQN.zip
- Size 919B
- Sample260804-j9gcbaar2z
- SHA256 6f95eb405da42d66631c9fb4520071321f01e143a922d51b4cfdb0e8a7c28609
- MD5 20cbb008729220734c60d87eab550550
- SHA1 39d848c6d3b82cc4d703764d667a47b9ec9162fe
- SHA512 be88c526917f340870fca0b9ed47ee5899f820f3f650b2ba6d23ab29c52fb95ec2ef961da0cf9aef05ff71da9ece89129cfd0b633b3eb39abedb959341f317eb
- TLSH T1E81167E2475DC859F53CD6B88E01A40C012C5E931961369D3D5AD317811496D6E71779
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-69LTQN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-69LTQN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-69LTQN.lnk
- Size 2KB
- SHA256 ca31ecaa857156605c0551b4e684cde7528ec5b2b773c31532e65be5101c82f6
- MD5 0269262ca29e633670d69c030e9ced8d
- SHA1 e74a5f5e83ed42df3de1ef7510825ea560047945
- SHA512 badf1b08473d6e588818baa577cf1ce5b0bc5cc8090a31609b3874c8adfd70aea731e3b57bc7d35a21ab02a589273843bb646e4960e7419318e9a5553a1fe392
- TLSH T1E34134807AED41D0F2BACE72DDFE6750497B79956DB0D68D0950820C1422B01E977B26
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.