General
- Target DOC-X3GV48.zip
- Size 921B
- Sample260804-j9p98aga88
- SHA256 e4c6268f623ad1e984d6c15708ce899375506be539e3a307f2e057b917b7b8bb
- MD5 32078dbb9dc7b165d13f11d77471fd22
- SHA1 b191cc6a08f38004681f4906883fc94bbee4b61e
- SHA512 6e52eda97c2565a8e6101b000cf238b4a2e48b263480d0abfe6612a7911bf389ec80bddef1d93519630991f31389528c3400cc75e898fc59d0667d13b63e04d3
- TLSH T1F711B71031108463C1C2D9F0F12B577591D7804E993D450D785C85280D324E7BDE8514
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-X3GV48.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-X3GV48.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-X3GV48.lnk
- Size 2KB
- SHA256 361e800281b56f71d2a15ae11e84378e0a0460f195e7f5b2165b919daa5fb438
- MD5 60e436d1e020353486f1d678cf7af680
- SHA1 8d2ea3e0661a6aec49dfb027310ef5994f6d6868
- SHA512 48c38ab56e8130701fbfdf0825f89bebfd075abf62b5ef7290602cc36d88f7a73dcc0aaedb888139b2d57e1f59698bf22870b29be0c8a4456463883c1de4eace
- TLSH T1EA4141803AE941E8F2BB4EB2EDBE275148BBFD625D71C54E0850820D1422F01E97BF27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.