General
- Target DOC-AWBIS0.zip
- Size 881B
- Sample260804-j9fqsavekb
- SHA256 405bc1d4fc91f76b8d7322645bf73579c583c63a1dd4320e0188af5849bc004b
- MD5 c815efb2c92829b1702d2d44d737a4d9
- SHA1 8bb5a91fe22354506e57bcd5933a734b010a1741
- SHA512 3e85053c91ac88b0045edcee77da48bb642fb78f77ad2daf1ba5d11b01ee405e8162fd18128a010bb7e17da2b55f6b61f3b20ea52b7d1de99c51b7e5582841ab
- TLSH T15D11969326DA02E3C7983D70306B2DCE5C97AD4205AF131B3432062B69364548F94930
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-AWBIS0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-AWBIS0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-AWBIS0.lnk
- Size 2KB
- SHA256 f4865b165bbc82d2397fac6f600d5dc5c1485282469f22390360fcb5e038d1f1
- MD5 80153ad0d2e413dcac8526a8d430ce1e
- SHA1 3539525d08376a37ac12387a740223d8372548e2
- SHA512 a4964de9a63e8891b4f8b050b859cca0568798356b0f947a8dbe117d39c1fde9396de44e3d040488b9b9098fce9e66e487cb04df08b269df0fe910b0ab8b9798
- TLSH T1BD4147902FFE0194F2BB8E7699BE3B408ABBBD565E24C65D0440824D0822B01D973BA3
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.