General
- Target DOC-M0YTMZ.zip
- Size 944B
- Sample260804-j8tw1sga57
- SHA256 fc68c15cecf00b66d53929a8df677b34b350941ca383c4353f914d05f3b8434f
- MD5 7be78eab2ef4b08b491d266175751665
- SHA1 fbac9d5cd21a081824f4f67a54c223180395ab8d
- SHA512 4fc21b79f4502c9868a3760295797e6e2829657342402572832992d46c3d1456e99360093d2c6ae1fa5cd94d780bbb9905c395a89d1f4781564e624ad3718ad7
- TLSH T11111848A0A50A4E6C833B13AEB430D8323E8B46661D240922651A41AFD1306CEECD5DA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M0YTMZ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M0YTMZ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-M0YTMZ.lnk
- Size 2KB
- SHA256 e96d0bbe0a47d86e50b29379f92454ef1f3064a8b6f9eb4adcd2f9016b9b9258
- MD5 b63882525af80f5f1f098f71b7599f44
- SHA1 b3d9d76fe5dffd5c8e9d9f6782a47b7d5743014b
- SHA512 fc64312087b9c515c781037351333fb7c59a0f74e4a90bbc265c710704e15c9552697630cb1ee146ca1179d4e8603bfbc44f39fc55f7119b30b5e1b64efe21c1
- TLSH T16B41F1902AEA01D4F2BB8F36ADBE675149B7BC515E20C69E0850C24D0812B01E9B7B36
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.