General
- Target DOC-9Y3LM0.zip
- Size 817B
- Sample260804-j99nvszzdy
- SHA256 84bcbec964643024235ac4bfa4edf641a53df20d4aafdfc6eb509b97d1edf8ae
- MD5 64bb5a0f0d0ace35cdeb546335da9811
- SHA1 c5f501fbfa92bd4ab7fc0cfed6a28d3a09376184
- SHA512 ddb3709dfb882fef1e3f2ea975876880d6064e94ff49370e832750f6542521594dc17ea480b5c0ccf4ba2fab4ce350011504367a1cad7be29930200b5d17fb16
- TLSH T13301CAD571FB0AACC4014D7F083A3F199D4013484F29925508DC3DE44E34EC0B5C94B5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9Y3LM0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9Y3LM0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9Y3LM0.lnk
- Size 2KB
- SHA256 d8aeee68b6c6b28246cceea72de9c287112590b9ac9eee791f0f6717a194eccf
- MD5 6fe28fb48e47a57550e449aff22bdbf5
- SHA1 76ae69602c4fa508ece48e7008a8bb1bd9ed2478
- SHA512 04600a5e8bd7b4fc1930573c573043b6179a54a521c2f4815ef5c414819adf5f31b8d5d10e81ec599374bc0beae9b5abb7c99fe5b20b901b035ebd3b236020e7
- TLSH T1CD416B502EED45D4F2BB8E32ECFE671085BBB9A25E60C69D0850810D4433F02E17BB67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.