General
- Target DOC-3HMKM1.zip
- Size 995B
- Sample260804-j9gm3svemc
- SHA256 d128dbbad30552ff0798c0a4e7b6ad81376a10d4b0200cad19bb5808e267e975
- MD5 a6cb8efac0b754c369beb950d0c9dc6f
- SHA1 229824e1c8faab889edf45558461e9a84576d581
- SHA512 74c2a290ec5d777205df07cd85d8abfd3aa76a5abc61e0427dd511cb583acdfc83e0baae92f89c8098284f8b12544cb7959d0a0324061c423d7b6c87a80077af
- TLSH T1C611C863EB0882AAF9C1823F08724548445B69803537F89FB0C4F552683729D1E354E4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3HMKM1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3HMKM1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-3HMKM1.lnk
- Size 2KB
- SHA256 732cbd0f2a68c6d4cbfa626d7b5096d3509867780e77830fc3fc4b6a386b50fa
- MD5 5ba0a623d8163507a3c22575799cb13a
- SHA1 341f448206dcb0b1818ec8b825f0e0b3260ba5c9
- SHA512 221594c7520e389985cfaa380cf86a0aae34174f895d124c67fbe2ce90a81286a8376f2532021651ec91fd6f6c14ac6d3e87b0fedeac9c853631828f87d43771
- TLSH T1C651549036ED40E8F3BB8E72EDFA7B14497BBA911DA0C1CD0C50814C4822B05D477B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.