General
- Target DOC-96TRZ5.zip
- Size 590B
- Sample260804-j8szqavdpc
- SHA256 16a6a955cd4bc8908c619fbbc1bad17e4eae03f338ae117a0f60596c372b1810
- MD5 8682b53ea2a261153e9dd8c59f68e9bb
- SHA1 307e929fcba65153f58a2d0cb5fb827b321c83f9
- SHA512 91fc50b0674e9a573df333c3264b0b9c8eb949237f0e07bc9aead75d3088cbc06574794fc7ddbfcb3d819668b22eaf9933135fc7630690807dca8f9efc0c01b8
- TLSH T163F096E3CF5E3842DE80C43DE8B291E00D189C83E343A71F282C60D71C36A560C1BC01
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-96TRZ5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-96TRZ5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-96TRZ5.lnk
- Size 1KB
- SHA256 f27482e9db685993ac23c23fc879ae4ef52263f88bdddc5c4a4071ae54555dae
- MD5 f7743d00807bd0464b0fef31d54e17c0
- SHA1 e36349a5ee921f6a389b86bd31d9a32d364adce4
- SHA512 15048a3b93db155a63f8c21709cbe4ea570c423eef52daa0ff022423560c337ac5a45f6263f715f41e63ad62c9232dd43daa3de7663bbe4729f1f267d8b640cb
- TLSH T1423197102FEC0624F3B38F7298BB672085BBB9968D20C62D4140450C5422A15E13AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.