General
- Target DOC-4AAMID.zip
- Size 933B
- Sample260804-j9gcbaar2x
- SHA256 d1d65bc1cab35ccd71760dd9dcdd163c0d40e934af70128335d9c9197c60500c
- MD5 b173ca62ff7cd85185237aab39d203c3
- SHA1 6a5b9fdfdfbf86fe77d8bc0540efca053f55c71c
- SHA512 cf6a716377399b61afd2c68164613c625fe116d562887d7c7f1346b9ab2a6705082ef930e3c0189fff6df1fce90582689b7ad5a77a072661aee78cf7e8d5eb87
- TLSH T19C1184F2C2E56241C7E3C3B01EA16D09C23A9886800F1D8778A4A8CC3EC5DC68984710
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4AAMID.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4AAMID.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4AAMID.lnk
- Size 2KB
- SHA256 8ffc29e0144a150041311ee533ac832f5a05a6548fac5902595514dbd630da23
- MD5 d19aef9de0bcc46618c207ff66abace1
- SHA1 cd31abd1f5f4325d62bbfe1742dc37995b31b92c
- SHA512 d19e4910df638c11308f3275dd6f9ef5b9a6df8c3a435d1fea6ee6dc1c8b4ab9cdcb8b09327a9fa806774db670f4f5a5be3731016919c64772ab2d23460abf1f
- TLSH T12B4162803AEA40E8F2FF8E36D9FE775149BBB9516DA0C59C0854810D4822B01E837B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.