General
- Target DOC-M793QN.zip
- Size 595B
- Sample260804-j8tk9aga55
- SHA256 5c6c7c425e5a89603aa9050d59d99f690259c68c367e252e2bea9d31d5dc6f99
- MD5 99a333bcc1f1084ac8bc6c9c3120b3d9
- SHA1 fa2228e6bddf5aed0bc83c130db13b5e08975c8d
- SHA512 2e147d55f26c761cf5e659bb73eb4d3b0386f70b4ec6297f190d6a17435bcaa28e63a6d13a865723bc3e1185cd796b8541c0a84248d1639fed3f9ac5d175db67
- TLSH T1F5F0413316A0D155EC03C8742AF733160124701376C3EEE81DB1E97500E6DA02817EAA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M793QN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M793QN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-M793QN.lnk
- Size 1KB
- SHA256 e2e8d71d596376d1ae11e35ea82361ba199b3c63dd979240bf53811b9b30bc06
- MD5 d6bec868493e14d4fd4bbaa82d1cf811
- SHA1 320c8185a914a1ee60f1c6021359fb3cf64e9b3f
- SHA512 4bc1f67ad0294d10fcf1b6873f3b04c861d9f955c6d0d39cdc925ee7088240a5266bfe74490191fc0c3a4a3ce6080d1d4f35bec5c5cc0f422f61ef61cc00778e
- TLSH T11C31CB103FED0624F3F39F73A9BB572089BBB8959D20CA2D42414A0C1032A15E57AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.