General
- Target DOC-0WTI3B.zip
- Size 592B
- Sample260804-j98fsszzdw
- SHA256 4081faa4297dd22a695b763452113f1432e7447bf7abc6555ce4e96b98150a90
- MD5 8f1247f314cec3b3e5d3dd649446b317
- SHA1 94447e35a908f06e779e179c1943e9fe38617be5
- SHA512 b0bcf7329c4cdbb9a8e8b0cae3e68160245207d9f9ce521a959f6cfda8341e80034e3746f336916d6ed32e430bb9aaed646b0cc6dad34960a882d375aa72c3ad
- TLSH T186F096B38B0B2004D92F9D7A1DDE600B0740B042E20EBE24DAC0F94B4263E20C5E042B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0WTI3B.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0WTI3B.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-0WTI3B.lnk
- Size 1KB
- SHA256 348275fd49a34fae25ec25b8d7db603eb66d50344e7a417160f1041b39c9e0b4
- MD5 930219c75800c8c97fb4113f2945e00d
- SHA1 796457140f3d15396ae6e3c5844eadd0cdd3d3eb
- SHA512 2bf209fe4b70b8b45afaf85b17dd627c9e598d971e86d869af9a23cb1e5b0f2c0a16b43c8a16fb00dba4e628cfd0c85b9101f22addfefd29d7151b9153a95092
- TLSH T1E43197103FED0664F3F78E7398BB572489BBB8958D20C62E0041454C5032A15F17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.