General
- Target DOC-N45MM7.zip
- Size 942B
- Sample260804-j8tw1svdqf
- SHA256 7ae3db85c5e853ea953de00e928ac207d93242c6bd0b762a90ebc167438ee7e2
- MD5 29f7b6572aeea2f9638635e8651ad8bf
- SHA1 2472baa3595f6d23c24e59af0afd701bcdc0a5eb
- SHA512 8b74da36a21129f5bca569de7f6e6b9210801bb505a372a2ea2946e9e0e8fdccd6ea176ed0a871d7e618b6f32c111a1bce890f5c2deb91733e4e89c661f73bdf
- TLSH T1B911BB734B8B0500C77CC0F87052C95177A3C58E265D4C6FAE39E95F00B04C91485A6D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-N45MM7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-N45MM7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-N45MM7.lnk
- Size 2KB
- SHA256 bf14ff36a8d47c43d63cc9759c930ac2f92c6a3d62efb4842ee84f1ccffc185e
- MD5 5d45bd8a98ca1e0ce5fbbc8c386e0a07
- SHA1 8c6da6fda6637122ea99ec3c92ec8d5981b366b5
- SHA512 656eba0fede0635a84bac939f000d9dd7a22ae78e171e5b5bde1683bf89d5346397d74863e685995e8ae074c66a230aa75283cae0773f48bd8ee233de07e5a1d
- TLSH T1FC4136803AED01D8F2FE4E32EDFE6795487BB9515D71C58D5990820E1422B41E573B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.