General
- Target DOC-9A25MN.zip
- Size 831B
- Sample260803-qfy4laaa77
- SHA256 f980d8b01c8271a67914246fabb3e4c73932a8ee1838dd6890591253ce7369f6
- MD5 9647db236b572f33631e67860f8918ba
- SHA1 b2c9988a76e4d0cefa5c2ce65327f2fefbd3e9e8
- SHA512 fb25eddb44a794253e888c9634ebedeaf409146b9f0e294a57c3243a0349d7c04600001d791209a1ceca6f7817c02eeca6b333fe9145632f203d11dbc31172b2
- TLSH T1640112925AB90010C771AAB4332A6449FA520C48553ECDF881AD774290B6796BFB582B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9A25MN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9A25MN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://br-adobe.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-9A25MN.lnk
- Size 2KB
- SHA256 b71ade3ff3827604334a077b5bb141cbbd0a7ba7e30463bdf3906ce2eae73fe1
- MD5 f2bf6b93d3c14b2159f678ccd88605f0
- SHA1 bd102dae1354ee6361b0e42f71e058afd0a54148
- SHA512 ce3066d7c76af7afefd03fda66f18ff668795402d9c5891ff23220d3243553fb32dec1c8b81d05e58d47583f4e0248ae703b2b24c726749f56bb65858c88b8e0
- TLSH T1094167403AEA01D8F2BB9D36E9FF2750887BB8456CA1C58D0814820D1422B05E977FA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.