General
- Target DOC-B9HG0T.zip
- Size 584B
- Sample260804-j9gm3svemb
- SHA256 b9d08b40a33ae9eed01125cc54b12b75ec07401c5ef7d8bc657672f929cdeb51
- MD5 da4f1408d9db1a0df2c6f55b36c8b26b
- SHA1 d54b386e16697101cc9d86f17783330aac422016
- SHA512 c3a44965114a20d84efec047c59bb05211390bb70d5ad2a817a87f7d007ecb35d48b911b0f9bdd1a9adb0c2515f059a47e9f5901c46dfa99245b1319c4de1b32
- TLSH T1E1F0EBF45AA09A61C244CE75B63A716647F6863C836FAB17B7F0ED328822611F6409B1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-B9HG0T.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-B9HG0T.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-B9HG0T.lnk
- Size 1KB
- SHA256 4310ecfcfa663c8d04215a48052cf8a45a8a7f3aa17d906bff96f03c9dbb7f09
- MD5 194e6257b049e18006be65082759788b
- SHA1 5c3e5711d96aff75551e1b89119d6ec684d50e55
- SHA512 3d7651f0d121f2cc5d627fa03739baa8b464d93c88a7606525906739db376fc17e531b386e07a9cb4d10e3b533f3e1eaa848c66e87be41dee6fb40de361ace32
- TLSH T1933147503FFD0A24F3B39E7794BB572485BAB9A68D20CA2E0141454C5072A25E17BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.