General
- Target DOC-OCB2UA.zip
- Size 879B
- Sample260804-j9f2jsvelb
- SHA256 d1768ce978396cd4950332b457effb88253795f799ed17530ea540378bf9fee4
- MD5 f5aa4ff75eb5dc9b3c771e95caf67356
- SHA1 2c790c408ef92e32a4276e3ee2e8fe54d77fe29f
- SHA512 537b976ff40907bc5f4626b806a31e805d1124fe2cdb14884a11b647092453820c6214e7cdd529ed09fc3f82b7c33c2ad103cc294f731d3624dc49b28b22d6db
- TLSH T13D11D6B270D6D42CF86720BF2DF8CB014D8140F1219636A890F0C55AEEA78C2450F225
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OCB2UA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OCB2UA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-OCB2UA.lnk
- Size 2KB
- SHA256 d9218305f8004d8fd2b934c575969f050db111d942fd24f9c9cb9821df6becb3
- MD5 7a45c3aafd9f88d5df3b825764153fa0
- SHA1 e223026c44cf01e06ca94e52ca6a206780dc63c3
- SHA512 524a7e69d9bd4d7c1161420f02f3ec5a4b64ac48d772bdb9258aecd3a6129bfea3ec90e29249e1a293481aeea16140d8981ef9f52fec1880f230598b0e7b9f8d
- TLSH T13841F69036ED45D9F2BB4E72EDFE274089BBF9A25E70C6CD0840824C4462B05D977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.