General
- Target DOC-8O3QQ5.zip
- Size 839B
- Sample260804-j8t7savdre
- SHA256 bc591fbb2adf3c9f5c3674f955dd4eced75e686619b275f747780e9a57db991d
- MD5 df41e4d407c3c48b4d7f835a5126e617
- SHA1 99e55a1a8ee3f313e4f5618c9f7269a583dd45ad
- SHA512 ee52396e113f712c39d1c18b4bb90bd08633d22da43fa89f31edc70c65a15cb35ee7894c8b663243d61960d063f88e152747006fad08ca02b74993744603588f
- TLSH T13601527E87ED2053D105A9BE68631FCEEA7C703A801B661925A384AE08E5345D347D00
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8O3QQ5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-8O3QQ5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8O3QQ5.lnk
- Size 2KB
- SHA256 5fdcbae635abccdf53957201f39aa0ca17a1bce60c668b9a7f7e7dae01559e06
- MD5 f72544b4ce508c2030914b3c554ce43f
- SHA1 2641a0c948a5e259c364947229c75b567048da09
- SHA512 377ee00f43739956f45a7a724000b2d619dbfe7ea7584944478482c4792cdd5e177d12d8918d8f256ecb88e0ba2aeab9b65c4999ca670918eb1d015f0b27d878
- TLSH T137419B802AED01E4F3BB8E76DEBF7750897BB9518D70C68E0840800D1522B04D977B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.