General
- Target DOC-IM2XSY.zip
- Size 586B
- Sample260804-kacqhsar5x
- SHA256 7e00d686180721c1f1c9c85035e8b64ea19c60931960b7dec0068974b465f571
- MD5 ce686ab4fc10d2daf6f97b5a96bddefb
- SHA1 2f16b2065e45322e937daa13fe0538564ed375d5
- SHA512 a7e207cde4b90a50ef04f585a4f2e6e19a199bde46860b5418c888c3c25bc359f6968f04daeb960c5d4d895d4000a0ce4a311eb74b6b1845cdf872b3830daf49
- TLSH T1C0F04717135C4057E46B987CBC0F56A14AB51434600B47E33D2D800ABE1C154958D4B0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IM2XSY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IM2XSY.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-IM2XSY.lnk
- Size 1KB
- SHA256 850b8dd7149a8d8c53a2c4d9e4c4fc3c4a8b36c954e573bec3b07a37d8593952
- MD5 8ab18365c47204e9670f428e19760762
- SHA1 d279666c858c1992213f381fd845bebbb36ba54b
- SHA512 3e45cc71133213fcffc6cb0653beaf4d12e8869047faec6be32086dbbb29d4a951adbfe721d7f34181e731680dda00f516efcf22cf956710c2982ba4a9bddae2
- TLSH T1743147502FFD0628F3F39F7794BB572889BBB85A8E20CA2E0141454D5072A15E27BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.