General
- Target DOC-6YCVHU.zip
- Size 903B
- Sample260804-kadyksar51
- SHA256 920455c0419d0ee38ccc479774be188fa8abd9c64737aa53f05efdeef5b4dc1c
- MD5 ee59a1fb0853f7cbe3f1b9d53f733915
- SHA1 ce676327785c7184a425da06ad7827856ac2b9f9
- SHA512 0932bb62fe1073db9db197662937bdfaeae71600c568e2e2bc36fde16732f2b3509d1d70ba94daef4c0b3de2cb88a1599f10d5322d0b2e01bf240179b4cc8a60
- TLSH T1E9116768CEA42D04C50797F4CCA71C87DF659940051A6F2FD12A6818D85875B19D6127
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6YCVHU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-6YCVHU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-6YCVHU.lnk
- Size 2KB
- SHA256 c46900f7f3f65f16f9dade9ee49c5e54b82cad6dffe1d3973f39b4f38b5a7cab
- MD5 c8b0ef38d3dc41b321b566ef3057fde8
- SHA1 0245055b413447edd6028e8acc1d01701872053f
- SHA512 343f925976504dad444cad9cc6c15fca7a8d4cb57d447670a07d1f6773a1e17935dfd875f71a956d8c231643bc54fa7fd38d853eaf28eb10a14308c3a55a2599
- TLSH T174418B613AE945D8F2FB9F71E8BA2B11887BFD915C71C64D0440820E0822B01ED73B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.