General
- Target DOC-MPC1S0.zip
- Size 965B
- Sample260804-j8snysvdpb
- SHA256 4ad86ecedb75528636e4a21dd4a0002ca4339ba919080b090b8b2a6865292946
- MD5 2fdff86432411b4272074adb1052af90
- SHA1 ead2293fcf160d4e038c66d825a9543b821f0120
- SHA512 db0ec0529a10507fa6fa4100c03557c42b8881bf023b099b427fafd6ac633aa5e3e1657197e2a7079a3d4b5ec2b49968ea71214264c96f8685eee39bbddfafdc
- TLSH T1EA1188E784195514DA3FD0709828A402D531618D559E5F6F306CC11BFC4CAAF7D64E53
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MPC1S0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-MPC1S0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-MPC1S0.lnk
- Size 2KB
- SHA256 28a5a6770cab8c956b3d85213d0ba8d9070d14b7191814742719a3c223cecdbf
- MD5 6e45141e9e270287eb104d7ca1a4e023
- SHA1 1241adab52fd27775970d12d89b7f0f576fa3f40
- SHA512 50188e0a4c24b2166b4fd4618d4ca15839862023832eb83b73717df7698803eb5e13565685b5236ea51a3e330bf3b869ec5bee9e3a66342eeca7082944b7a28a
- TLSH T11E5129C13AE905E8F2BF8E72DDBE6794453BB8617C31C2DD0850824D1826B41E977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.