General
- Target DOC-RHITE5.zip
- Size 592B
- Sample260804-j9f2jsvekh
- SHA256 8ca624e6ecba5cd41c39f3358262aa3d8fb527c5890190b01d7991edfd97ca12
- MD5 6060e5166c5be50c54af8ce3fb101d51
- SHA1 afb2e37a652cdb54b19b3d8a25af8f42c6cd76d8
- SHA512 c7b349be4e3160fdc7dba5b924565eda5043a4cc7627b183ccb6d6cf7be6775f329b0c6759130c37126c8dec10d555c1f1b3660fb2ee1c6828b3151edb1eb829
- TLSH T175F0AC2BC48A484DE908E2BEA0760F74574091DD4DFBB2376366EC5E6088082A7647E4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-RHITE5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-RHITE5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-RHITE5.lnk
- Size 1KB
- SHA256 9ba321bac691fa504425a35d7ef638d562fccf044c501ddad3e2544a83a6c434
- MD5 430fd8c15f05ded6947a5710c5a3d964
- SHA1 6b08b0ebdb3e4651d73ce40c7b28a90db847ce27
- SHA512 b1dfd695e379f0a4497c67bfe2cb2f36b59257dd774f44e3d647aad3e2e9aed6556083b0c6dc9e7d135ca0078e76e5f1ccd4d238f709ede1ca4f7eed36352c76
- TLSH T1723197402FFE0A24F3F38E7694BB572489BBB9958D24CA2D0040460C5022A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.