General
- Target DOC-Y5KIA7.zip
- Size 589B
- Sample260804-kaej4szzgw
- SHA256 c5c5c797f490fa50f283b68d3dbbe4a0dd683c4bf7a8fa5b4d7d55f51d4e4908
- MD5 7a22863a496e704b99eb651c4d008794
- SHA1 5a89942530e634b500dc304b0975abfa7c59cebe
- SHA512 247e0851ddd9c26fe362fb8a43baea24be6ce590a30ae40f7bdd53e8e915319fb328073aeb9db01dc963b6dca8d0a9da2aa76ff62e5fe1977ee8f1feeae03942
- TLSH T1C2F096B2220F0806C802E07043AF60334F0480ED0A0539C9B26FCC8818A50933EC1E30
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y5KIA7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Y5KIA7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-Y5KIA7.lnk
- Size 1KB
- SHA256 064145974482164d4365ae48b18112159f49616b1ecd00a1a46309a9444f7d59
- MD5 0d96ce80168b706698488503aafdba6a
- SHA1 983bab96c79ac99d6220caf8b2c387b4345eeb19
- SHA512 f63528cb2984c2d77a08ffe701f25070e21f6d413d85475893461e2cc58b72a620fd61462c82f60c687234f8252b91345f90ced3d09637ae9b6aa10be9f6af5d
- TLSH T1D1316F503EEC0624F3F38F7294BB976085BEB8AA8E20CA2E0040454C5422A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.