General
- Target DOC-9RO303.lnk
- Size 2KB
- Sample260803-vtbyfacg42
- SHA256 b7be528b9ac4175deac2e692a59175cb6d4634d574d7704ec79948d66b293e94
- MD5 215182ca2c9a0f0ff5e391d8c2e42e88
- SHA1 18ca43f1a9b837a276a672d86785e930f66a0011
- SHA512 d9ff8616d7001e3848d2c34bc3318393a9570faf2ed30e8f181372615eecb03c9dc0583843e5f62f12558ae41f5a0f6c86b2855df64ae57e27cfcbed1166c452
- TLSH T1894167902AEA01D8F2FBDF33EEFE6790497BB5516D60CA4E0840854C1822B05E57BB27
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9RO303.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-9RO303.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9RO303.lnk
- Size 2KB
- SHA256 b7be528b9ac4175deac2e692a59175cb6d4634d574d7704ec79948d66b293e94
- MD5 215182ca2c9a0f0ff5e391d8c2e42e88
- SHA1 18ca43f1a9b837a276a672d86785e930f66a0011
- SHA512 d9ff8616d7001e3848d2c34bc3318393a9570faf2ed30e8f181372615eecb03c9dc0583843e5f62f12558ae41f5a0f6c86b2855df64ae57e27cfcbed1166c452
- TLSH T1894167902AEA01D8F2FBDF33EEFE6790497BB5516D60CA4E0840854C1822B05E57BB27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.