General
- Target DOC-9CH5BW.zip
- Size 583B
- Sample260804-kaej4sveqe
- SHA256 8c6ba8c6ac74d4a66cc0b03e6df090812e7b8ca3615e5957e30dfc2a1cefbdd1
- MD5 692a107ad50b657c751226be60790a23
- SHA1 68109da5d300959d9611f26f723d6929b374008c
- SHA512 63c675e9241c77b4e3468840403434f61f7c5d6d73ea06f28c7fc2626bedf866e50bc72ec953c482739c12b45f5f72d532e80d3ba7e93ba6b1f71111251d7f79
- TLSH T1DAF09662460DDF46FD1886FFB997BA270A06404F501B183D11E0F9048C335C08F8C8C3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9CH5BW.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9CH5BW.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9CH5BW.lnk
- Size 1KB
- SHA256 bdde258da221e19fe82d26ad12a10d2ffabf23597e58cd1b797803bbbe26d514
- MD5 bae9a06cb849e06b1ebebec58a4925ba
- SHA1 73c9956ece27bec2bf1cc119c1743ac1b5116e55
- SHA512 21780a15e17493560d82e4ef783bc1c5bd4bb9ce1b5aba3e1183a2253fa0d15bce1143f4d3631120f1e992e82891b975f1fe2d35e73cd69c459713e7e0a2030a
- TLSH T17F3197002EED0624F3B38F7784BB5B2089BEB8AA8D20CA2E0041450D5062A15E13AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.