General
- Target DOC-YE6TIL.zip
- Size 931B
- Sample260804-kacqhszzfv
- SHA256 97a1cc73c488fc7e8e466e3d72491b77bad858c54675301559d263fc3416cd72
- MD5 d52a9edaddcfa8ccc9861f172d666d6c
- SHA1 f9829ffc71264cd2f85088c391a20f859f3a1f50
- SHA512 2c303c89c3f4fcc007006274cd302ef0fa81e5effb899029196c3d6ed071f6a94a5f3b6c4b18c373033c14fbe824c4e5a4d962e5151453cd13ed43c4355bc1e8
- TLSH T1FD11C4823B3D047DE594D8B1A034634EA27130E1101DB414273AE16BF8EF2E44C58AE8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YE6TIL.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YE6TIL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-YE6TIL.lnk
- Size 2KB
- SHA256 4af230e034cab6315bc923c42c70bf40489ac0809ab0a49629ad853d21704653
- MD5 95ad4925fe97849345e74b64a82b7416
- SHA1 d750f59a759e777caaf4ad7999c6a3a30e8a5349
- SHA512 f68a955846aa43c6ab2ec3b482d4171995ac069169cbb1950b3e9e40baebe86b0f63b2cccf32478851bed04ef910711ae95c346fbb92f2b4d6f82d67492e5716
- TLSH T11F4147942AEE4194F2BB8E76ECFA6B50483BB9505DB0C15D0C40820E5822B01E976BB3
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.