General
- Target DOC-189I94.zip
- Size 592B
- Sample260804-j9f2jsveke
- SHA256 9ffdd35e46ceadb9b085f7dd498ef170e01743e44a8558a7aad0de2eb584b8b1
- MD5 17c50c00903693cb31a05db24822f4d3
- SHA1 dcae441bc06efd8307b15fdeb6db3c229aef56ce
- SHA512 b23d2b8698f77669e569af7091fa5785ed2ea48edf57265a860b1962f982686863d76e6f0b0452b33d0c6ac04ae8c7934b57222cc9d7209497bdfb289a12b3f3
- TLSH T150F0415A8A071006F8DD73BCF4F22B002910C4B62B23048D83326EC16CA8020DF07F10
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-189I94.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-189I94.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-189I94.lnk
- Size 1KB
- SHA256 6092251f654068599f2107f357bd78b626f7984b219a9644bcd1e8f00406f4cc
- MD5 5b93c23de6b44557a14c5f259a00dc46
- SHA1 9ac641b67ce1c6af1e970a052d06b0e09057cfb5
- SHA512 4c617ed871536fe80f0f66fe9f635076b521d45d3ae31b224c5962a40f46f048bd62a7730e3ae2706553553c6d2f3e54f2fb421c0e06b44c51263123b776db76
- TLSH T10E3197002FED0624F3B38E7388BB572089BBB8A68D20CB2D0080464C5132A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.