General
- Target DOC-9SF4RM.zip
- Size 909B
- Sample260804-j9f2jsar2s
- SHA256 8667adfdcf6d3b550ce48eb843083a18f2bd9f39c6cab54962ce16ae3855d654
- MD5 95576ba32d5bd5d5fca3ae08a0f65757
- SHA1 56f309923e7151fccb2c363986060f5d4e5331ae
- SHA512 5a07a4507f421b1d1b8966d709eb02e5fcb3492cfef3e3c2b1b5868967feaddd4a23fea6b6e16afd96c036cd1c7a3650cbad309589b867bab8f08d9de2d39d29
- TLSH T18611B727B5E98F04E78B80B8E0962898E056507601036552499B76FDED22EB5247D04C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9SF4RM.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9SF4RM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9SF4RM.lnk
- Size 2KB
- SHA256 ce77f55bf3a05012fb63cd46dc7f47faab8a9eef2b95299c45032a37e35a9819
- MD5 e7e4991ab849347d58b78a9c81001bad
- SHA1 6491934029c68bab6ca3ec3d159eb75326997102
- SHA512 d0235868995541d05faa4fe28a44e40e4f5fcd0009475971e7e7eb306cc0a388bd5a362c6aa85cb14905d18468af17e2d5958eeda0fc777ceed4e037e8502bf6
- TLSH T1884146913AE90498F2FB9F32EEFE275449BBBD615D20C59D0881810C4822B14D977F63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.