General
- Target DOC-566DMQ.zip
- Size 888B
- Sample260804-kacqhsar5w
- SHA256 0688c52a1764f65a0d1eed6e42cc6c5ad8cc7131f6516ce015506aa33ec27b93
- MD5 b522852e1e1a267a9c786d56f14f6ecb
- SHA1 68d6c099637ce353ab699bbad038f3126157dcf7
- SHA512 5614fe0baa8758d71de9e8816745aaaec208b6134a0d9e43e197c006fb3c9ad10bfce39bbaadfd2c6b018ec88abe1f9096bfb5eb1ed0f7b274b142e333aad10b
- TLSH T16E119643DD283821C44751F844B7E4CBE0F715B448BC5283A2BADF7BDA2509629F2604
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-566DMQ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-566DMQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-566DMQ.lnk
- Size 2KB
- SHA256 ceb4da876a323579f241a22eb10c6e838026ec66a8503b213546c325e50d754d
- MD5 bf5f587da941c677948916134baaa6d0
- SHA1 6dcc6a006c66c2dc316e73d12f863e1f017cb8d8
- SHA512 ab22dcae6651dd4176e3e0c4717bac05f940780d50ec1c1b078bd8cdd4121de2dad84e0fe10b89dd1c4abc816a0285480d104b8b3b8a2f65489edc89d09a46e2
- TLSH T1054135803FEE04D8F2BB8F72ACBE6750897BB9A25D71C58D0551820C1422B41E8B6B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.