General
- Target DOC-CONS97.zip
- Size 913B
- Sample260804-j9gcbavelg
- SHA256 9fb318d7622c30658fd138b63408ee17b3020e2949202ec5245d86f21a17dc28
- MD5 2fa572b8daf1a2999a3f2d5315d96600
- SHA1 7ae0ae71dc1705646ed4f40c5f84244c46f84d14
- SHA512 e6f2e359716afcb72957c2e32470436fbf395d5bed6a0a726adf1d1dda2984912cec820be1cb99a5e34fc1a7193336a56d4c04341f682e2379b12247b941c391
- TLSH T16911B78D1465A685FA05C13831F1B866C29C968512EFA743C1E0D37D1D30691D9C60CC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CONS97.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-CONS97.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-CONS97.lnk
- Size 2KB
- SHA256 cf8117d53bd48b2c15df04e423c099f8f368c045e357a7432af9db49937a398b
- MD5 e94c877c82db4243e74ccfc16b2b5255
- SHA1 bccaab51c4e7d7b0daeb8f524092ee486530b0f5
- SHA512 b4d8944ad69642377b585012417d103f99fe387e2d29d9d4435a04ff07c803231be624cf26d75d6c39b943d61e9829d06a6a0d6f7267ee0935f23b6df4237868
- TLSH T117414B503BE904A8F3BB4EB6E9BE3715467FB9625D60C68D0940814D0833B01D177B26
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.