General
- Target DOC-A56W77.zip
- Size 588B
- Sample260804-j8t7saga67
- SHA256 c177628bd40c1ca27d111d359bef5c934dfd340192dea578c43fe83b6aede078
- MD5 6035ea46f69b2939736d57ce836ff8f3
- SHA1 a494bb9889373b9f3e48b139a38da7d668df50b1
- SHA512 43b901c22a2f4c9bc0a0ef96d1ff48d63988ee519914ad9ac0df3ff3d4bf1fb4cff2f0f36f641f316bfc506b45588078d1dcc54d8ff74600ae5b5f9cc6759e2c
- TLSH T1DBF02614508C091FF40DCC749E590AF0071CE8E7850A72EF7549EA7F14013C50F3A9B1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-A56W77.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-A56W77.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-A56W77.lnk
- Size 1KB
- SHA256 e738fc6033b157ce57b85868f01da33e8d446ad4c2a98d96a34551e2e229234a
- MD5 031dc6c2e7106fccb606bb76aeb227f3
- SHA1 ab99dec7ae0246ccc7bcc0ae507473f1a5f410e7
- SHA512 8e651165ee6580f8ebf5ffc5fe253fb44cd6adf661215bf940f69516ed73fcbcb896e43bca2913d2918b917c6c897a222a22c1b8758f2bbd2c4d03c0556bb9f5
- TLSH T1273147506EED0624F3F38E7698BB672485BAB9598D20CA2E0141454C5062A15E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.