General
- Target DOC-AVX98D.zip
- Size 944B
- Sample260804-kacqhsar5v
- SHA256 c996755214ce2f6130d9613bcdbfa76ecdd5e2ca08bd32845acda1c42a7bef6c
- MD5 f4880ab9d41e33a51648809f5e4cf0bf
- SHA1 d8c205f03faf65f7f5a88bfc1143751049f11aec
- SHA512 5fbf7313ef519be349769ad5b8cc8c800a750315e0986650c213abd4b4a9c70103f75fb17765af1e0cd41598ea100ed7a5c5dc01f314ee120b73a0dd2aaf1807
- TLSH T1CE1184378C4C7154CC8240330576094B73BAA6CAA462F6D27091F80829A60A7DFA11E4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-AVX98D.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-AVX98D.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-AVX98D.lnk
- Size 2KB
- SHA256 5bd1096f1e2017756bdf60cb1b42e1aaff18e8d6a0f28062d6751d4ca3090f2d
- MD5 d63094d06b8b35dd66d72e573449c54a
- SHA1 49f9c0e57eb30e2555a294c45f07529327ef7dc1
- SHA512 01dac544dd2cfcc8fc660f6f5bbb6ff58c9c355dd12e18c9636b7e0116bd55caf6b7c1cfc692dcbc8bd425cc928181f26b1421caddcab94e7de656a1cad6b00d
- TLSH T11E4122803AE904D8F2FB8E72ADFA2755897FB9964D21C5DD4980810D4822B01E977BA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.