General
- Target DOC-OB3ISR.zip
- Size 937B
- Sample260804-j8vhjsvejc
- SHA256 c4d4b2c549313bc4e5598de6e5974f11137de0187f6de204c3db25503dab2a3d
- MD5 0fb5b012aaab99e1ca91ffc9710fc472
- SHA1 f6c01e127f754f16af0d30901b1769aa40cd4ead
- SHA512 79867ca41c47f23073a5edbe4c567dae99833b397380d1bbdea549815b2bb7c09c2dd48e0f3d23974abd616db96c785934ee7c89652cda82199b34130452b391
- TLSH T15711B7EE8740705AC2D5C2B7377B1CC255A59A43C0EA2B011348BEFA255FEA094F3AB5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OB3ISR.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OB3ISR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-OB3ISR.lnk
- Size 2KB
- SHA256 887943f3eaebb94e5d785b0cbb58e3a824dd126ef10cc96127bf82c47cf08cec
- MD5 649d31d6dfb035d6a92dede11754b024
- SHA1 6f875fd4ffcc20f1a483cff6c95391c281830aa9
- SHA512 5337b9618fcceb97c187a52e08e4041d4ec2a2bdd4b542f569802e5791e57064be2487b8b4b0466fe71ec4f6d6971dedd4e1f1b0cf3965587386dc1b2c96c6d6
- TLSH T13B4147902EEE0194F2BB8E76EDFE2B104CBBBA905DA4C28D0840820C1433B01E477B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.