General
- Target DOC-6OW2MF.zip
- Size 591B
- Sample260804-j8t7saga66
- SHA256 34333d46ea5edbbcd9b68979862053db9a75fe563c6ddc2a04744ba3973abc8e
- MD5 e097c954b6d03795cace039d0fd9be3d
- SHA1 ca91cd9f264ef2e4c21d4e546fbca492d6a8633e
- SHA512 93b0e80ea3ba4be1b92e1251449e7c296cce7ee3d0b2f3b8094f2b64a072994c13f68b69e4f3728d219fbd5d06092a41d0759e4c56717752b91ff39aa68364d3
- TLSH T13AF0E1D390144343F7656A357AB7A765F9098B96814D07BE92227C774C140F87B87102
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6OW2MF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-6OW2MF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-6OW2MF.lnk
- Size 1KB
- SHA256 ba0838c76e05d932f4aa218ddc82e35eabecf7b41b2cafe4383348168636bc6d
- MD5 f769fda8cd18f849e3d9003ddf8aaa8a
- SHA1 4c3e128e5bf5af2b95a6ba8862d3825049356fb8
- SHA512 aec40b623ea501c64cbca7c88ea17af9af14677471d39402b53fb445fae637a4ad8f14603585dd9632e541577a4903d601f22451a6c450d13993f652dd11e50e
- TLSH T1073197502FEC0664F3F38F7788BB672485BAB9958E20CA2E0082494C1032A15E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.