General
- Target DOC-EMK88S.zip
- Size 587B
- Sample260804-j8tw1sga59
- SHA256 5ba83041756fb30c66d084f425f0f2d1df1f62f1cd53ccd4e764e2d138e610c8
- MD5 7392cf59d9fb30798b822b3896b99367
- SHA1 85b2e15fa77107d1adbe952c721534f45f9664f3
- SHA512 f829f5d920d3a7045bf8a35e9b3e742e3ca3ab80083351ece57e97830947e1809b0d4f2f407a527714e186e3c469ef55c6524ea43b3ed28fb75e445988d38eb2
- TLSH T1B6F041B2964904CCC182E0B31FB37DA20811B18618AE4D1B682F92838C6439FC7CF1F3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EMK88S.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-EMK88S.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-EMK88S.lnk
- Size 1KB
- SHA256 f137e60941048f7c94221f523604a35bed4eb3d0ffe0ecb241de00a5413daf9b
- MD5 ae5462b1f85621a3344be4f0123d6fe1
- SHA1 fe80bbab117af932a3c6e1d966a270ede54c75e5
- SHA512 3db7c390c7d42b93b4e5583d4236f75c2ecd9c46989189dda51bb1bac7ff9a15c12d0646a48629244437ba4f72a23406ed96c718d2f6e4de7a6a79725776c189
- TLSH T1193147503EED0624F3B38F7694BB572489BEB8568D20CB2E4141464C5022A15E57AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.