General
- Target DOC-N94KAD.zip
- Size 592B
- Sample260804-j8vtbaga76
- SHA256 bfbeebcafb691f602c1a1a9f4b28988fda40a11e70072fa2ea2e005b0e42171e
- MD5 028c312b441dca35be5ef177e3035488
- SHA1 5c695cede979d6d0bf2ab9023ad26cc659617d8f
- SHA512 f93a76c9f058be20992f5ff9fdbb39d1e7c9a71b7b789f983a283f88b607ac9f3f9d609c516b6c1d892c53352ce06320b5a9fb0c1724e4b8f957d0bfe5b1cb5a
- TLSH T187F0413D87505809D92280BE5C77AD88E511D1860F280F0681B7D0023D6EBC329423A7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-N94KAD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-N94KAD.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-N94KAD.lnk
- Size 1KB
- SHA256 985a868e69f0f1053cea7139d7acd2f2eba4aeb34387d99edee3a6e7fe999409
- MD5 4d7c78a3f364c730566f4ba6d079b6ec
- SHA1 6cd5dfee9a997f4cf46d7538f36c2c1e078e2e60
- SHA512 ed787b59f4967ad6b43e3e297f0bc9fe13a8058b43283fe3a8163453d5b877f494ca26143ac4035664e4e36cff100f3d9f97dcb94e2a3ccdf77b6ff316376cc4
- TLSH T1643197003FED0664F3F38E7794BB672485BAB8A98E60CB2E4040460C5022A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.