General
- Target DOC-UZFM3P.lnk
- Size 2KB
- Sample260804-kd25ksvgpc
- SHA256 342d93114f2c444e2c3fc7a69d989b9f01a0a513342318e7ea3c161badac01b6
- MD5 0e7b34bac541b83b553ae2f3d2a42eb4
- SHA1 5891a2f13713f7de264fd01f619e67d678d65900
- SHA512 9ec92a9e3bbc0122ea5a6480b23ad1677c79c6ba28bda59fe1ab056933b499167c39d4a548a45f1999cad7474413634efce3fdac3ab3c5b651e0887493bde436
- TLSH T1865102803ADA01D8F2BF4E32EEFE278159BBB5616DA0D65D5C50C24C4822B41E936B22
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UZFM3P.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-UZFM3P.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-UZFM3P.lnk
- Size 2KB
- SHA256 342d93114f2c444e2c3fc7a69d989b9f01a0a513342318e7ea3c161badac01b6
- MD5 0e7b34bac541b83b553ae2f3d2a42eb4
- SHA1 5891a2f13713f7de264fd01f619e67d678d65900
- SHA512 9ec92a9e3bbc0122ea5a6480b23ad1677c79c6ba28bda59fe1ab056933b499167c39d4a548a45f1999cad7474413634efce3fdac3ab3c5b651e0887493bde436
- TLSH T1865102803ADA01D8F2BF4E32EEFE278159BBB5616DA0D65D5C50C24C4822B41E936B22
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.