General
- Target DOC-Q6TUA1.zip
- Size 593B
- Sample260804-j9gm3svema
- SHA256 c4eaaaec9b390c83ec0e46f5747d08cf6e883e5cb2ea20533fef5f9d3c4c0e01
- MD5 792066a2fc8c607ace4c24761c2740c9
- SHA1 73d7cc335b961275741d49c4859114fac63e7c97
- SHA512 0a92d6aa4b6d7801f1f9e9bf52ed76e13ce65f1c3c43dd1eb087c67b484d9ea95c2f5edaacf1c19796f4cf5d080725231ad214616a2dad6c05681f26b52fc20b
- TLSH T17DF041BF4618020DD11807FD62678BE7A7E4C6022B1E04DAFC9CBC1C2DE4D132A59480
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Q6TUA1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Q6TUA1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-Q6TUA1.lnk
- Size 1KB
- SHA256 b2bf9db0a77f95e623ec4684fafa63bbf87a02c89e157746b87fe26509fc92fd
- MD5 b302760eac539cfc7a7af0a7750bb3b3
- SHA1 1fc375d35834718a09b92208afbdabfb49dba17e
- SHA512 cabb17086684dacdf255acfd4e0561795b0b1625430a8954e4a4ad90dd00f59a456b6a0134c4e6db554118a6d3fcb6e23c6d35e7d96a417b5c554bfdd832fa00
- TLSH T1253197402EFD0A24F3F38F7398BB572089BBB8958D20C72E0080464C5032A15E17AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.