General
- Target DOC-77A87H.zip
- Size 822B
- Sample260804-j8szqavdpf
- SHA256 7c09bb32e58ee73a17abcf9b3d3f38941ef05bf3ad50fb9843a19738261b93f4
- MD5 59f69c6334aa153cbd32b15427345e3e
- SHA1 219df47862a9129d837bfeabf3a9a20ab864c0d8
- SHA512 d510ddf59c670e55b296bb44a139aea3d856f121c570747ff6efe7340c16f35d76894e767631d94cc25cab0635ce1581a70703e92ace0d0f3de6adfaa0928c55
- TLSH T13F01413C5AA5A1FEF0DF40BF967A1B512AB752B6D212949852E48C2B58700A4E2A9270
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-77A87H.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-77A87H.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-77A87H.lnk
- Size 2KB
- SHA256 9244fcae955210bf5cfde2a1569bf23fea190922a08485282345e84a143750a5
- MD5 d03f3feab9c3a8e07c80b90464a57399
- SHA1 83a6e475c5f577f7e21aa267531f47c64972e175
- SHA512 4719c31a93de6946a0089ce6e5f777e741d6b9808b63e51ddcd88e7b7a3600835869496c7526bd1e0d3fb87b7cfc57c09e751f9a0d68e1c7da136d7ce8867031
- TLSH T104414C8039E845DDF3BA8E72D9FE675189BBF9416D70C64E0840824D1922B09D977B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.