General
- Target DOC-9N1X0D.zip
- Size 593B
- Sample260804-j8t7saga68
- SHA256 5c29feb83fe0e0f06a24eba75ba41cc9a7985014e4243d1e353e50f8f325e6ea
- MD5 93ee9b86e0b415a5d1d30c57b2355df4
- SHA1 ca38a8de06ca1585fd0dd9d217e5a95369890125
- SHA512 0354f1d1e7d157ef07052546b8ee9ddeda71efd7666279d7844a8393657bc821141856789656a5fd7ea293b6f23d4226cf273160b02ca9c5e8496913529e8662
- TLSH T15DF041B2C5064002C0B2E07308F1A59BCB05A45D0D7F2D3D1A61A2410C41F980FD11FB
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9N1X0D.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9N1X0D.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9N1X0D.lnk
- Size 1KB
- SHA256 1e7eeab9b788f2ff66bd8683d049ce1d245090688ba6c1c7ddf3556b87b70fd1
- MD5 0634622e29c3e996702859c0b76f1008
- SHA1 768b2d14aedf405d7aa26e264624bde08138a853
- SHA512 0fe41944ddfc699f7319feb32beb9695e090664e71aa4c1338b25e65f441cad75562b6cd5ebadfc91305b50613d612608232934a4d3b94cd91eb4a95e0ad9155
- TLSH T1A73147503FFD0624F3B78F7699BB572489BAB8568E20C62E0181454C5472A15E13AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.