General
- Target DOC-8CI2IW.zip
- Size 589B
- Sample260804-j8vhjsvdrg
- SHA256 e4debb8da0f6c98b15c9ea0744a9fb5123baf00eebdac330ee63df75d5e11dc3
- MD5 73296e97fdc8384b4bdc931cd0154932
- SHA1 d7b282b7ae80af835b287a9305949901b1d16619
- SHA512 3078c52eaca940aa1a4df52be8d2fe9a3ac4379707bc3254cfba723ad8ada7b32a8a3e51421793769bdd5e05c8165f8c3b189d6d79681935b457236daf48e5c4
- TLSH T1B3F0E18F59CD513BC62D903974139AF5C022C6C041494A804736DD323D686E69AC15B9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8CI2IW.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-8CI2IW.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8CI2IW.lnk
- Size 1KB
- SHA256 e79aede8c315139bc01cdce2a99716e909b11aa9a0438833c5ffbd4d35fc2800
- MD5 97e860941a639af2f74712ccce9a8d89
- SHA1 1e9131512e11f5f8ada3790d069181ac0cd26ba7
- SHA512 a72f879b52765a81dd76eb8f0048d9fd7cd24cdb49c59ca646a1672c01f13e48904f2b6b998e5de4f8169e76664362662fafa2354a0cab7081b88a3d7bb6dca0
- TLSH T12C31CB003FFD0624F3F38F7384BB572489BBB8968D20CA2D00414A0C5032A15E53AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.