General
- Target DOC-20FQH7.zip
- Size 581B
- Sample260804-j8t7saga65
- SHA256 b5a59feb7cf91631c5f8dee441744dceb8cdf21f59d211a09b0cdde094fff66c
- MD5 faceddbcc8c9fc31c2dfab51dfa934e8
- SHA1 32b0bb3746e0c261cb13ef3da6144be6b062db3f
- SHA512 ab8758f5b08135b63fdbef9c0e5d98d8ca2ad21321b4fa9af18fbc45bcacd6d3488e8a7086c9dfe89cced1a66e72e7de9cd16bc45abe666a6e381068bcd6e2a4
- TLSH T19CF0E1EE5234532AEF4914F67821105E526577A290630BCB2551D04BC7982FD4B94163
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-20FQH7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-20FQH7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-20FQH7.lnk
- Size 1KB
- SHA256 ccf5f437945d1cb0d7b06abe3bfff3806a77f230bf0714e32a65353e8e763478
- MD5 0f4d4c2bbeb863a4ac1601dfabe452b0
- SHA1 07a9782edd372ad3ee1cfcb4e30d586cb182f0e0
- SHA512 140978c17b03f41377a3c70f417ce6219bde14b6f3cd522996c4a9d3e8a78e85daba429ebdd5a34a043a93758e269adee72067240189cfcb84293ecc17b25f6c
- TLSH T11A31C0403FEC0514F3F78F7384BB571485BBB8598D20C71D0140450D1032A15E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.