General
- Target DOC-9OSOCU.zip
- Size 582B
- Sample260804-j8vtbaaq8s
- SHA256 c0624524b704bb71548e3e64f176f569470ef1871dd7fecb21908d0ed43988fc
- MD5 eaa0a8a85392cddd9bb1f319199b5cf9
- SHA1 c6d89f860048747ac9172e4cc717767352140a63
- SHA512 059b0c1b8693e1e5ad7164794721c0ba14d52e63581890b14530acab7e9f00de12b46b1db266ec9d1eba8a6e7d8789f179cd2a679ea22aada8a5b182d90694a6
- TLSH T1E7F0E11A8F2D8882DC0102B1378FAAAE122E3AC4881D2FD6CF69E44B1930069590A424
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9OSOCU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9OSOCU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9OSOCU.lnk
- Size 1KB
- SHA256 322988fe73e7f7d8f2f3dee0b85213ec1d8193fa9b8effe492212d82cedabe69
- MD5 deab98567a760be50a641e373bf17222
- SHA1 eaa1aee412aded8a1a2d23c78ebce56792f4f787
- SHA512 e7f96b561190dc4b30fdc3e97c0c6d26a7aa35ad94e67a98d4f78a4cb348853e6faf9d8f03965739fc152d24810f722caac7350f506edfad997089fce4f7999f
- TLSH T1723147502EFD0624F3B78FB698BB572485BAB8568E20CA2E4141854C5432A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.