General
- Target DOC-9KWHS1.zip
- Size 1002B
- Sample260804-j9gm3sar3w
- SHA256 5773434d3b39624bff4155cac6af4da86b8ac9a19b3cc881d45976e6b6ced354
- MD5 38f97d1262e2c5d445a3ef2feb615dd1
- SHA1 c03bcde6e46639f2649bce2c793abc41fe641771
- SHA512 6d012fccfc4d8e98bc5f93d3ae60343923629a7d50540e715b743d78fb12d88875c482b8b0b58eebd00d181310a78f897fe20d780b50e79bb7b0645f3b313229
- TLSH T14111A5BFCB0B8116C9CAE037B2DEBD0B022051212405558F1A1C00532D8B10F8584756
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9KWHS1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9KWHS1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9KWHS1.lnk
- Size 2KB
- SHA256 9a55e16c077b01d0b96ef2b316490435eb90e1247f0b305da65781df5d8fc48b
- MD5 b90bce4240431cbe89d16c0ed62e9c07
- SHA1 4e49619db9b4df0c4c02c685414b579067dc9d29
- SHA512 9857d0033ed1c0bef551415869aee9cd2c1ed16a9c426809fd858d2661bdb89ff8182350d830de83c85bc3e7aac435b93ceda57b17551033ca3a55833fc0f68b
- TLSH T1F85104803AE901DDF3BB4E71ADBA679149BFF9626D21D58E0840824D0822B45E937F26
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.