General
- Target DOC-U68CWU.zip
- Size 965B
- Sample260804-j8snysga42
- SHA256 e1d3d1357a51f2a8040f51b3d52acca553d092a0a038c2a24f222823cc6c84a7
- MD5 26454fa429a86976ee2ccf16d4f1d0a6
- SHA1 b85c9f6c9fb17fbd886d068f8875239a7cf20898
- SHA512 9bf57b9ae2f0168310249607b57d1dc7fa04a1d62e239341a61c634ab14ff1cf198489ee07b9a3d3c1d02d0b44e140f8770e0558a3506fd575e13f617d222ee8
- TLSH T1E611840D9E6D95A2D0D85DBF1E621CC3AB2D500539089060AAECE8061EDB7954C462AE
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-U68CWU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-U68CWU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-U68CWU.lnk
- Size 2KB
- SHA256 98db5e93e392678334bad7bc72385164a9aa44058c8262e8e8791bd45f07ee6f
- MD5 819540f4c74a0eef23505ebdc51acde1
- SHA1 38d07463f6cc9a623e045b0c0ec6bdd465fa0313
- SHA512 eae97a1f5f9afc4227e4235ed9727c94ebc660c547f77e2a8c6d91ede50c26521998e2172baa376e5008cba52a2ab18f56d12d2fb6258657fb5dcadcd4336500
- TLSH T1F14135A12BE901E4F3BB4F72EDBE2B91457BBDA66C21C28D0850810D5922705D177B72
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.