General
- Target DOC-7LOEA8.zip
- Size 882B
- Sample260804-kaej4sveqd
- SHA256 c538e475fc4425b4ede50fa9d99fde42bac511b816633a87b2b5852a040a62e7
- MD5 683cbcf37893995c97a5b5fd917e8c82
- SHA1 517af98bcee45690cedd1fc8bbc7da54a6280eae
- SHA512 d3050f5338558321f2c1bddd785c78b0760a6821c9bb17e8e706b9296ca86d0e86165318a2668967635dcbae2934c401d83d3e537aaf8c01fde1c1a92e956930
- TLSH T164115BEE35457E55C533ECB1842D2255C6F104B362D6740E1978E9981D1C665CF46418
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7LOEA8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7LOEA8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-7LOEA8.lnk
- Size 2KB
- SHA256 cac796182946fa7042b7a8a3eefe39fbe73802f843ae71cf50d61c59152e5212
- MD5 17a5b230ff75494de925962a3bbc6059
- SHA1 9e458833c8ed78bde940fd4d884684277b11f3d3
- SHA512 a29b5e911e2e51546654610ca7c3581d9e3d2d87b31cb036c1724fc6d70d1bc6eccc60d5aa103d070b7cbec1a85947e99bd19a45232d4020cfca5c773d9c1ddf
- TLSH T1424147941AED80D8F3BB8E36EEBE7355487BFA565D30C50D4840814E0832B06E977B13
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.