General
- Target DOC-O9WNB0.zip
- Size 853B
- Sample260804-j9gcbaveld
- SHA256 7afe2585a92b7e682a3b909177dcfb70e49b62f1a0e5f8752fdf86ecb9c006d3
- MD5 a71839c616e2698a40c8a01ccdaf9495
- SHA1 7b7f3e176d4e308fe9bf5254659ad338c792ef4f
- SHA512 2e5b9dbd0047e0654a1ec8b94e500dc0a384347592c936da5d83f51eaf328d1caa176885db7827d901d4d73ba469627c13d48e4d12776946265b426084552f4d
- TLSH T1210186B759217054DE8E85F924333C07DF56A284D13A2579F378495B20424790334F27
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-O9WNB0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-O9WNB0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-O9WNB0.lnk
- Size 2KB
- SHA256 79554bed4aeb3e574bc86d241bf9246caaf10ddf03c7a192f2799d42c2d5c3db
- MD5 11c0d5784951bfab95f126ba9ab1e647
- SHA1 a5b0e956a4e3f211aef1ae9821cad9cd4d92a5dd
- SHA512 118036ad20478318b9a0f7ad641996a0dc2b3544bc611d1740e706f737d03ffb2889eb56ed89166308f62193aee00738b7fa29591c968607a39fadc9c44d775d
- TLSH T1964108803AED05D8F2BB9E76EDFE1750497BF8615DA0C64D0C51820D5421F02E576BA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.