General
- Target DOC-2SK0IE.zip
- Size 594B
- Sample260804-j8vtbavejd
- SHA256 a35c80e2979849f84cf16bddd45d4d7143f810fd1c84d66951d17211b256b347
- MD5 b72102268518dc8820af74147ee34e9e
- SHA1 70b1cfe987dea3a81692917e642389b3787c85e5
- SHA512 8a432a3fcdc7f1dff017da92d0f06f1c9e42930241968d2528c4fc54070c9370aa56c656ae2ac4bbdfac956204a31684e569fd17a79e5f68f49e48a69457cc27
- TLSH T14CF041F24062D81ACD35523860BBDCF4081D188B45EB8B2F3070FF100D0422C5E6F628
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2SK0IE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2SK0IE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-2SK0IE.lnk
- Size 1KB
- SHA256 eb2915e6c6afae2f1699567558a386b8e0874904668544494cb5296a36dd36a3
- MD5 4dcd0709b025b4726d5e642e6f5c5700
- SHA1 7fa7bb6dfceaa94648e8d7c7be71cdd6532c9076
- SHA512 e720c2ed305cd8cd8e0c600ae54f83c523492886d4038793f01f64ddd78c400c49019ff2d2652abd19ac215cb0b930a9879855af09d99fc70835fb21b21614a1
- TLSH T12231CB507FEC0A24F3F38F7384BB572085FBB9658E20C62E0140460C5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.