General
- Target DOC-318TMW.zip
- Size 955B
- Sample260804-j8snysga44
- SHA256 954ec61e6a65a2a685af6dbb639edd402a97e847dd1da0367a35a9dc70739748
- MD5 30a1b5411cb0e98598c938fb09b661b2
- SHA1 ccbeb3b34a9d4bb6f1b183d629b9815fb4714a53
- SHA512 fa6a5de8e190d8b698ab02ac5eeb6836ab5ca979facb0b78181b31f072210dd91166d4151fded0dcbddc64ce4ad5e6b4bccb14bbdad58ea1289c46dd807e11a9
- TLSH T14C11845224269B8CED91443A35E3F46B43798714D07D340BA664B6002F896AAAA7AF70
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-318TMW.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-318TMW.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-318TMW.lnk
- Size 2KB
- SHA256 241aea0db0796e9b4360f2f20c333ccc6d46368d2cca05ca0f95450ee2833a7f
- MD5 5b545e2aa4b00d173137d0767f93d916
- SHA1 81d06da3e3bed41dfd5d0cf46dc2d57570d0aaef
- SHA512 6c4ea0d8da4a388233caecafcbefd7c8d6612d4368519e13188b3da2c72ebc6fad51b21fa6d08f5b0613f1b2488b53805870e6ea1d81445770efd85882c79fc6
- TLSH T1D14105902AF901E8F3FB5E729EBFB744487B79866E20C58D4900810D0822B02D5B6B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.