General
- Target DOC-9SUU6Q.zip
- Size 591B
- Sample260804-j8tk9aga54
- SHA256 e734819bbde251422d5ed68cb56c603c61c2acd29fff4bab449a8151913420ce
- MD5 f25f6b77405e911688a73c5e66b25832
- SHA1 cd4b0b798fe14a24f25c5cab55902b3953e30314
- SHA512 425dd3806b31620fb40e8da652d3bea30710a6c83a799834f7faadd1cfd32a97e1aaa09e47df91b5fdeea8ae8954e1ce2ca1aeacfea66b2ab7fe2e30a074a183
- TLSH T1F5F04194C0812828F207F6B8602F2B8C52406A6244CC5F43A3E4E9690EF16FD32506C0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9SUU6Q.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9SUU6Q.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9SUU6Q.lnk
- Size 1KB
- SHA256 202dcc190f6c72fd27d665261a19cb7ad77b465f46469cff045507aa03842ac7
- MD5 c99dde5496abb23a839805be9793d259
- SHA1 237151eca7614de4bee84df85bbcc11931180180
- SHA512 234acc653f0e94aedfcf226e8e35ca5afdc9c174ab4faa9a5b9c38674fbc3bbd2ca11f1c135283b1a687d33c945e3232f836c34f966583ac5843d3a6ff47623e
- TLSH T1753197003EEC0624F3B38E7394BB572085BFB8A68E20C62D0040460C5032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.