General
- Target DOC-TMN33L.zip
- Size 876B
- Sample260804-kad9cazzgs
- SHA256 522490547c6433ce1484406c524688dc8c817c086d1c088ddd57dfdf75bc1824
- MD5 c1807ffb6110dcd55cc89b690657eb69
- SHA1 423e119ae75a58faf9459836dc6c7f56461831c3
- SHA512 dc9c6c65e232ff66fe2fff16f2e90b2e19583d8cf5a21c087bad0c763c689b3744a5d5bbbd0e2e0128eb772c70719f8177438862e3b43db3d0bc24df60084bc0
- TLSH T1E4116334D0E63602C3BB85340A9CED49A8421A493BCAA5B711D8F8C60D314E52738940
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TMN33L.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-TMN33L.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-TMN33L.lnk
- Size 2KB
- SHA256 0598c4fb25dbd7e3e761e48222a9d15cecc9e9394e36c1ac34fe9897f5cde314
- MD5 ee0329c7e91b1e2801f59881c712862c
- SHA1 2e03e704c05bf51f5fe2fff59e64f3cc26e3b791
- SHA512 477854dadb1e8dff16bb5298f3db9493e689f325fd213129eaacf806eaad6745dafd12180222cd548d1577761b1a2f7d19cc3543b4ac956074d964a8f79bf6d5
- TLSH T1AF4168803AED05D8F2BB9F76DDBE27544D7BF8515D21C59D0440924E1422F01E977BA3
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.