General
- Target DOC-3MN44V.zip
- Size 866B
- Sample260803-qfkafaaa53
- SHA256 ce93f0d832dd6978d4e01fced2e1af91e567e89d8dee340795ef5ab7c7b969ea
- MD5 8dbe5d5dafa8aa702859cdb9f1d277d4
- SHA1 0923fd81a24f45be22e8a06650df06a1bdd1940d
- SHA512 c5d71ee6ad60858bdd85cf7530e59b3ddf8f4d14d210df24b60c61628c386250c05b14db83fde1449a40579ba93c0775285de9b794f807e20f59d0e567659fc6
- TLSH T1A41156958DC89CDACEC7C9F0D9532522B657E28F91387C5960AAF54AC1C4C73FA854D0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3MN44V.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3MN44V.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-3MN44V.lnk
- Size 2KB
- SHA256 a69f1cdd2479b1934eaea2e73950f5ca4750612d6ce4ffa5721e6ff56afff465
- MD5 90f225cd648cb48365375bd1c4f54651
- SHA1 b2578bb723ff30634a11974e594580b03a46cf6e
- SHA512 b9e66d18ac7141649183e9e17efba9708a081a6a745b5ec0d808af98fc70ad730eed53096f59a150118d10c7e0653a246f415ad39cf6059be52c8fa224d5bf33
- TLSH T13D4148403AEE05E8F3BB8E76D9FE2312497FB8626E60C55D4850820D1422B14E877F77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.