General
- Target DOC-DG9BUM.zip
- Size 866B
- Sample260804-j9l8kavepe
- SHA256 a9b1ce99cdf021cb82ae4b0ee80b3ec4197c98799e0419d08df7bb10ca3ac0cb
- MD5 bdacec152763f1de90927ad5527a560a
- SHA1 2583a5a750bee7cb8d2e61ae7064312da421cb2b
- SHA512 f078f79dd5a5e2cd32164cc93f43b3dabea086f9cc4a96da0e15b27e53bb767adbdafd19f33544ad4642e97143d74bb3eaa804fd62260b4cff5aae33b7fd833f
- TLSH T1B71156B692622507C942D535D19A1A35418A141180B5D27722B599D59C1B94E0FFBC8F
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DG9BUM.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DG9BUM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DG9BUM.lnk
- Size 2KB
- SHA256 cd176b5e991584dbfb5f7317fbed671f91a5fb2e38b661207b00ad45f613e3ee
- MD5 198329652cca2b5483737a00aec27d9e
- SHA1 4254762f9270dbbdefd144592db76046f9f65efe
- SHA512 3087f9fd4605db767214c04e5fde848ea4460d7bdc49347a16b4e047be17ee9fdf9ff5a37a044e67e64428b673223ab67aed3d88549a2aadc8df956fb4d35a1e
- TLSH T1334127913AE901DCF2FB9E32D9FA2B11957FB9115DA5C58E0804C14C0422B41E976F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.