General
- Target DOC-EHG9AZ.zip
- Size 589B
- Sample260804-j8vhjsga69
- SHA256 5d93ea89c6be6e8a5a5ed20953784ab81863c4d1c2ed95e1239124bf57bd2b67
- MD5 f420db00b1e53c4c9d9fb30aa3b369e1
- SHA1 9e0011947c3104e0c829ebecafbd6c80a564fb10
- SHA512 c8f2c85ecbfb5292eed21ef3b85d979a42134f3b8e81473fe0d16883bf77cf1a779142bac5a78128c5c94377660e0bce8809662b96d309359f7362dd9fab4c54
- TLSH T183F041180222604EE040F4F8E9D7332E02244BD0218B9FA91737E36777FEA225A07002
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EHG9AZ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-EHG9AZ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-EHG9AZ.lnk
- Size 1KB
- SHA256 83e34d5f131db667ee49da52032b5ef10c79450f5fd9bfd3d814863272ac5702
- MD5 5852251712532e5719a9a00b3e021309
- SHA1 644ee6e0dd47b4779b1a84c7309c2ce41b67b819
- SHA512 52ed17884266ab4fa501688b727a043e485b2e2aaf8818e42de01a91ccee3440f084c3e75251c9fb3f9f31820662638b393b832c5f2683e3c44173723aa72061
- TLSH T1C23197403EED0624F3B39E7394BB572485BAB8658E20CA2D0080450C1032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.