General
- Target DOC-8C5H1L.zip
- Size 597B
- Sample260804-kaak6azzev
- SHA256 6237157cfc7b71c0d084f0e3043c7ceafa891ff5da542a92cb97a73ab24c479d
- MD5 076a8b7ff5bc5918a5d1ac81c7dc9bcd
- SHA1 e848598f3133ec3d3c2078e9abc80b64dc8fe250
- SHA512 7a4a60ca2268e1972b82b5573b5181f01170dd867edab391e0a0205b1c0a458d8bd0864dcd5fa4d07b2366b26945f2bca0dda167477ed061c69061bf1723a554
- TLSH T1E7F041BA9A488207D8AFF83B652A22EB801204D6011F0B090C5AD630A68B6A16DA541A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8C5H1L.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-8C5H1L.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8C5H1L.lnk
- Size 1KB
- SHA256 e76f9f21db0f7dafdccf936087a606c850ff31fd1b99be0143ca0ded99134f1a
- MD5 cbccf75838f715b25e88bd2866ff427f
- SHA1 604988913f2b23d928224b28dd90bbb529dfd6bb
- SHA512 102148a0040682ccc8e88342818fdcfc45772823e40adf3bac22645f0d4f6d7b1f9b8a52f99b5c6cad32676d9b20ef833cb8e6212d8babc4fc164a30452c9f53
- TLSH T19D3197403FED0624F3B39FB294BB572085BBB8A98E20CA2D0040450C1062A15E13AFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.