General
- Target DOC-PWW9X9.zip
- Size 838B
- Sample260804-j8vtbavejf
- SHA256 037828dbcbe3ee92d10d43b0ab93769b105bff049fc3be088fb852763a483157
- MD5 53e2f6906b391c99e9d9a2bdf336942a
- SHA1 a7c83e8f84f0c6895d5ac07eefa03bbc91a613db
- SHA512 dc2d46e4339ef5bd9d0d9f9306fc4843c619b440d4a03e2260a358fa95550c191522b5853eb73d23aea576b22fd2be9ba0652532bfb40d4e383fdca42aefd2c6
- TLSH T12D018A93475FE517FE42F476A31C91946315311430894710C8B4FD46599D6906F870A4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PWW9X9.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PWW9X9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-PWW9X9.lnk
- Size 2KB
- SHA256 5096ec2c05219eaf3543a45770073cb115b19e0f07433b71c5eff2fc0ae4440e
- MD5 e45f40f2f95f0eda639a0f23dc153f8e
- SHA1 8bab809e9d4ceecdd34abc361ffe7c966ea5412c
- SHA512 199f9a000a4e8b9ab35848f47582c934a5f5a4b03c8e70f9e009efb61db30dd227f95a3387dcbad569317ba7895f84869ebec22e833f17692bb23b32e2840c80
- TLSH T1FA4125506AED05D4F3BADE72E8FA5B10897B78924D61C6DE4880810D1922B01D937BA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.