General
- Target DOC-28XSSA.zip
- Size 853B
- Sample260804-kacqhszzfz
- SHA256 417214fc5eb9c283db1622c6124583937568cb85a1cd08b47b4acaec360d4ac4
- MD5 807783c47ac5920ac96acb6689b73b97
- SHA1 86dcc700174a1b9608137bd2ca28ebdf831d3fc5
- SHA512 1f0d753deeb3c7106357d98d52c85a931bdcce6ef7b14fdc0fb83c4705f6bd6ce83e056bbc5c1f95e8b3e44abd38073405487ab7574c94dbae89e142a6544a6e
- TLSH T12801864F8225BE5BF19654B21436B7CBDC2FCD9661397066320873A91C471808B4A06A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-28XSSA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-28XSSA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-28XSSA.lnk
- Size 2KB
- SHA256 2db2102adb0b50635eabc55ac4e11f427536401664a39d2fcf4e55858b1d2084
- MD5 a57b52f8de4e80cb09773450cb0d2bbd
- SHA1 2835f1e14d86a1f26a98d559943e912136434aaa
- SHA512 3ce824f6d6eed7bd2d282b124d018feee09d03a617ca12038d41c23056a7603bd079695170ab277f04faea0948a6538a3f05d9daafaaa87a1ccf0f8d5551c420
- TLSH T141414B802EF901A8F3BB9E33EDBE1790457BF8555D70CA4E0500834D5412B06E573B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.