General
- Target DOC-M0IKS8.zip
- Size 947B
- Sample260804-j8tk9avdqe
- SHA256 0f3170fe80dd8e3a83123da19fec181af0c830d2d3e0245b9bd9e29131de41e9
- MD5 300ffe7b8f488516d0e781f270ffa8e1
- SHA1 72d8c60062463d7e9dbbb7bc6d470534d9d15d30
- SHA512 8160afb7f999c63838bf7c7d10ebd9b70ae83397b0bc89379f0dabdcebd0d0cedfa26a4981fcf5bc2205a311b9584d1dc52bef2e05b61812fe2a29ec2bfaae31
- TLSH T1E711B78192113044D6AD453081FCF70E136E5614E59B868E7CCEB6BA561029358EF6BF
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M0IKS8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M0IKS8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-M0IKS8.lnk
- Size 2KB
- SHA256 4d3cfbdec1b6f7134979b30f6747cbc604bd08812f537d3f69507a302da59f6f
- MD5 afce748dd66ffc897ec6b727212051aa
- SHA1 2d5ae9a08932739fca7f8ae63476a49878ca096d
- SHA512 4ef105aa1f675aff6f65667f4b75493087530c4b958df752715bae1c98c8c53cc7c5c1913d3da58b0b7fab196875db159e0af5ab123ece3bce62ab384b3e2925
- TLSH T1E44145803BED01DCF2BF9E32ADFE6750487FB9925D60D58D4550820D1822B86D973B57
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.