General
- Target DOC-6E8A2E.zip
- Size 589B
- Sample260804-j8vtbaga77
- SHA256 129feba686f2b0a15ef5998c6591e05616f4e9f7c055a6683efbe5a1e648d1a4
- MD5 6350b5705a45fbc672413b794a51643b
- SHA1 92b12e8d0721bc7196f1eaadff6f704e964bbefc
- SHA512 cc411852f977ee28ec0d1cd85415bc5f1902967f0b29fce70936c4dff0438866e3cdd909d391ad3cc7de5444945bdae06f7e35a199b48c1e9f453064504421c1
- TLSH T1BFF0E15F43580498E2F2C2727E3E6ED7459084D7C55E4BA26FA6A643163C0A02F68410
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6E8A2E.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-6E8A2E.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-6E8A2E.lnk
- Size 1KB
- SHA256 5a058d2b6179a5d96a7aed79aeaad2af589d4b6d9a2904ac050a448a42d2c64c
- MD5 d3398bca3e81b2757f3e90d4a2dbadd5
- SHA1 7fc58f4092775775d9dbd8f2069beaef8fc7c9a6
- SHA512 df1ce501d458ae272dddc4b14585511069755b4657b5b5c6b98a89e209ada87c6eecc84309a946c4bdccd9459a28f28ea750e265cb50770fed6e41ad9b8145d0
- TLSH T17C31CB103FEC0664F3F79F7398BB572485BBBA968D20C72E0140460C1032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.