General
- Target DOC-6T0THX.zip
- Size 589B
- Sample260804-j8tk9aaq7z
- SHA256 95e4d91e846959536c89fb36b37e6a5d224b68a562d987ffeaffcfe152ee468d
- MD5 94ff6b5033cb51039b9cdeef3d1bf724
- SHA1 eaebd93ab092c721123fb368a4542482d95026c6
- SHA512 d00feaf763e3391a10b8ad5d747ebe9ed5511653ae2b6572cabe57aa369229aa0dfda84c4b8bfa520b760445fc7676341642e582d871d6a6a9cbfb03dcbd9846
- TLSH T1A9F0E12B26E5381BF33B8FF951353151205152A3C15D09F72D67E2AD812E0929413154
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6T0THX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-6T0THX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-6T0THX.lnk
- Size 1KB
- SHA256 8664294aa44b3092d93a98a3606715f87f47c63ae13f829caa0f06968721189b
- MD5 7dca119b400e397ab4d0dce58e7f7637
- SHA1 b560a854fb2914f9020d21bf4c1f658db3071cbf
- SHA512 e89032de03de918b4f1f99258c9c3856a1849990896db3dcfd14e3386a5a215e05ea8bf36a00da628d3903f9d0e9dc7810adeb4f07cb7090d3a69dd8a5f166d8
- TLSH T14E3147503EFD0624F3B38F7694BB572485BBB8568E21CA2E0151454C5032A15E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.