General
- Target DOC-OC7SLE.zip
- Size 903B
- Sample260804-j98fsszzdt
- SHA256 3f4546ebdcba5d2678c8a41174ac039bcbe5d8c5a6fafe8ec8491b673d01f14a
- MD5 debf0f19014a086009e0ad296dcc8123
- SHA1 9cd2ea3483dae4d35efee97ccd6b0bcead810969
- SHA512 316c2552b42821df07ebb3025d8be300345e411ba4ab54737f64e3ee874d48e3f95dca3e9e1af5f5facc67779769a89dd6ba2552e110109aebad8d72f71b01db
- TLSH T1CC119653CD806B49DB624DBCEA05B00710F38F570641EBBAA80EF68165F55A089BBB73
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OC7SLE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OC7SLE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-OC7SLE.lnk
- Size 2KB
- SHA256 6693b3b95b121512fb5074ecc599819262e2d860e1227a8a0cae8e922fec2df6
- MD5 39dae5e030258cd4a635d58b3bd77d9c
- SHA1 5f1a4b06af26283067d856ab83e74788279242b9
- SHA512 c04eac2f17533cedc9fc89e37bc4e3a45f508a814c577c94a48cfe462c059c9513f8641b946ca72b277fdfe3c00502cd1613cfb05c15344a22aff4b9fa6866ab
- TLSH T1F94104803AEE45D9F2BA8E36D9FE2715887FB9A16DA1C58E0850814D0422B01D977F6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.