General
- Target DOC-TBTFMG.zip
- Size 590B
- Sample260804-kae6msar6x
- SHA256 ef7058811bb27606c4cd4765a6924d5781eed4ef6f98cfa98abb84d2bd1458e5
- MD5 70ff2293fe73ca77ed8dfd5825afe45a
- SHA1 531c9c0ff5af8edd5c5740a42871193cd5fc437d
- SHA512 0132bb7a510e0147e80ce5c503e11f63682ca624da6135e2a456c7e551f77a6536c2ceca8a348a45f631c5ccaf05f2404990bf08dd56713cafad718fc6ab9f11
- TLSH T17AF0EB63C6C98801E502F03BCC293E17A924508379EF8D456A3CF1098D9878DDB87061
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TBTFMG.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-TBTFMG.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-TBTFMG.lnk
- Size 1KB
- SHA256 35c0d3544ca8a0d7487bb8b3fb896fcbd5e3d6c76cb8817f5ea4d191ceacccf9
- MD5 230181ed689107a37f5cc4d43dd9d140
- SHA1 44eb029dac089990df2a2c3837324bcfba162f78
- SHA512 86ee877ff0c2db3bf189024119d84d164db1b73db5e0a970a297439b33f685eeca7d0e74f42811ebcb68e59c590ea04785f633d8da4d53811895d5b6144cb171
- TLSH T12B3197103FEC0624F3FB8F7298BB572089BEB9668D20C62D0040460C5472A15E53AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.