General
- Target DOC-CPM2AV.zip
- Size 972B
- Sample260804-j9kpqsvepb
- SHA256 dff55dd4fc4d2e592bd01fdbae3ff79fc0b6e46db8682e470006f5f9f4a3e256
- MD5 d0dacc4a110eafe1c2011a77c9819ef2
- SHA1 b1549ade409662a1b22ff9a7ce49dceca9a0f6c9
- SHA512 7d4571cb29199a3b27d773414cbacf01c2fb253d5d3235b6605ace9fb2be17bcd9a186dfdcd03baa090b3d647b948e13e4e1923711dd233fa6db85f03f7ab34a
- TLSH T1861108C1CFDDB324CFC1D0B50322AF8F01D1524D1084DC4FF8065883EBA15628FA1602
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CPM2AV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-CPM2AV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-CPM2AV.lnk
- Size 2KB
- SHA256 958acda218bb640ccbb01d073cba94c7019c7ebf9dd6c0c774bf1147e7083ad2
- MD5 85126772518d31dca7e77c6af3499d03
- SHA1 c625e29e0eecd59ee37720d4b35c0d0414760e35
- SHA512 7456a1806aad3dbc244cec2f7d14c5d545bef4c4ed50863995fb33342f1426ff564e2cb403bc5d7c8fc2e9c311ee69a36c928ae150f0d35a5759ec7d4b039d7e
- TLSH T173518B903AED01D8F2BF9E72EDBE679048BBF8615D20C15D4890814D0822F45E973B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.