General
- Target DOC-A23OLQ.zip
- Size 592B
- Sample260804-j9hkdavemh
- SHA256 a5978e318a7bd4478c082e83c1bd37fc95cf72606a2518c72f775d91bf1adf03
- MD5 c96145e0de8a565138ac4aa44c9933d4
- SHA1 4983f768cd1052a6828e1ae0666517edba610ae5
- SHA512 e35893bf795b8747568d8692ffc55c839b6265775a9639064bfc088ae6db57052c255ec68c046d9528fb17e8247edc36b61b179386b93d076ccf361385621b3b
- TLSH T179F0E1A7432E4F1ED224917D19393A49CDC964940415A694737BE4BEDF02A557EB0811
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-A23OLQ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-A23OLQ.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-A23OLQ.lnk
- Size 1KB
- SHA256 9bce7c633075aa70f7d9f7b34f4693628e61e0fb065c46877bc51a0292087bb0
- MD5 f09d36569e7da5f844b60be262924fe5
- SHA1 4395d04d091f7786e25444f8910c82a5a48a97a0
- SHA512 1fd55102267bbff9fe782ffddf0382ce0fb23ee67ab8771998d63afc69df9fd5022d38bbcf08e882c5c61a36c0cad9468bda0c7f394d7db66655fea7ffee1241
- TLSH T1F93197003FEE0A28F3B38E7285BB572489BFB8568D20C72E0181450C5433A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.