General
- Target DOC-R8SQEY.zip
- Size 931B
- Sample260804-kaej4sar6w
- SHA256 14479f3159097d314aaf47c651689cded14724149f07baeccfd5ce1a55ba4053
- MD5 a3f711c6d427899d253eb4cc41cde011
- SHA1 9f0729328243e183ab0d4b854e6bd9c0970f369f
- SHA512 572e10a38ccf099cbdcd1e8c56c5a0255404be114d9eb72a5b6345d5352e3e78d76f185fe84382cc28aa83a22fc329b8e7bb586bfcd250ca1ab5e7980381fccd
- TLSH T1F5116781009D0A5FC44AF37F309B65EA4250005EF3187F5FE97BDD5B085072A5B56292
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-R8SQEY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-R8SQEY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-R8SQEY.lnk
- Size 2KB
- SHA256 3524dfa82766f74d6a42218ee80f2ba52e16ae54fc842f40e1437f34a493e686
- MD5 8ee942aed320c19669eab8c1ba25b926
- SHA1 d137605d71c1a2cd97b35f982eae00b0cca856c0
- SHA512 e75e345a13ee3dcd9045d2da4ecec8ecf65f767de7756109c9bdca67625337bab04e3dfd3b9f2177f6d336b1f51f21ceb9dbe36071c38d291d6096d566115a4c
- TLSH T1AC414B903AED4199F2FB8E76EDBA271058B7B8626D34C69D0940800C1822F01DD73B62
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.