General
- Target DOC-PMCIPH.zip
- Size 803B
- Sample260803-qfxkrsaa72
- SHA256 031cc64183a78b086373e88cc760191ddc7db2ea7ee4a3c62c67c08cf9289695
- MD5 8e938c46139b87768dd5cc847e6cf974
- SHA1 36e1ecc9095c6bbbb18cd4f2742b21c4549ca6bc
- SHA512 7d690e46628f03986d313a2f2f5feac0b69d4d749dc9e28cedcf3cffa206e1fbaee749e56f964bf8f4bc5f9730fa5b2df50cd56415258d1e7649ff994676bb12
- TLSH T1CC0125861B057787C1635737766A1E49FF3755F9048B953C44FAB7D616121F87904024
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PMCIPH.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PMCIPH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://br-adobe.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-PMCIPH.lnk
- Size 2KB
- SHA256 78a1a7cbcdfd08f212389802b3a208c9ee94dbe3b69e7de5416f1c17bcf4c567
- MD5 5b59d71e1c0cef8d5a912b14da20b35a
- SHA1 73ba297cbad36b7e41e4008687a216e40f06d907
- SHA512 782c9e971de11bbbe24ef334fedc0968187adc7f4c78f9caade9539a3eef0961752ff5f68ad2875d0f054347de8194f7898e14458b5a4d055c87d538999a84bb
- TLSH T1FC4135803AFD05D8F3BB8E76EDBE979045BBB9926DA0C58D0910824C1422B10E577B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.