General
- Target DOC-27NW3H.zip
- Size 887B
- Sample260804-j9p98aga89
- SHA256 b34b5259a678e8baf9f5eb302cab53cdb72d982f86b9b0eb86f987ca07f749a4
- MD5 ec080023f5c9b1d94e1e14ff84f8c5dc
- SHA1 6aa1722ce6cd8f8aadb6691fc850c50ee14d2f03
- SHA512 9d05956a4e9270089e554e59be5ca23d5a24995945205570285a7bdf46c321d77b5a8aa537cd419872888ff265baba2f55ae546ac9ee518b2d9b4a6b6047c04b
- TLSH T12E119645038B4BCDE5C994749446DF9A93790CDB6D5176271DD4D3090DF79C06F8D470
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-27NW3H.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-27NW3H.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-27NW3H.lnk
- Size 2KB
- SHA256 542f7e02338b87b469d3b012af066a741590a5f283279b307dcbecaf211df599
- MD5 4acdb49561b600ae7414e0c3fe5276b1
- SHA1 444e8adc41ac548e1533bc12d6cb4fd7ec0ca96c
- SHA512 816f73a62d408edb613befd19af0a5b34a58bec92742523bdcc29dd489d29eb966c6bddd78af43bfcb3f2e3f57598f76b757daaeec36463e73c8cf7123d88357
- TLSH T1E34188903FDE04D9F3BB5E32E9BF1B5088BBB8656D30C09D0540814D5922B05E633B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.