General
- Target DOC-180YNY.zip
- Size 581B
- Sample260804-j8vtbaveje
- SHA256 e22f831351394a27f8d29fd9f6c7f4cebf660be870a83ee1b1d1d5285c0e87e6
- MD5 2b28b851ab464a40709e69caeba9ffae
- SHA1 cf0a9f46df2a0b70c6bf23cf7c1288adbb7325b7
- SHA512 564f526d319f2d3727a893bf9f5bdf15a0a6ccc0c5d8f4ba99fce73e0e5c2f9677d6a1abe093fda375c21b0675d5daf7369458152faf7b15e907859e09f045b0
- TLSH T14DF0414BD547E208DA0132FF34B7228902175C03C2226F88C2F8232188598960E02CA4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-180YNY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-180YNY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-180YNY.lnk
- Size 1KB
- SHA256 ebce7a3987063294733daffee5fc39f58d2496f8181cf8d5bd89ac1a7b321c50
- MD5 7e99ad916524d5789a154349e2afd81e
- SHA1 a92094891cc20fe5378a43139235771cbc2fe55b
- SHA512 2eb36efa15864c50dbeea8b472f8a8a15dfa27b56bf70fd4a6be6500394bf8f39f06cec3891c79c6feb15d2d958d1f29e0af157cce4af348fc86883b2c4d0b51
- TLSH T1E83147503FFD0624F3F78F7695BB672485BAB8668E20C72D0141454C5036A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.