General
- Target DOC-GW4N7G.zip
- Size 892B
- Sample260804-kagdpsverc
- SHA256 e1cd781086f1d1879595800e5b5805e67b2501ae64b1973323e17fa8581cd38c
- MD5 304ab62482377a89c9cee2f67ba71e85
- SHA1 aff59ef8bd2b44f6844428bb4da129bf9b7a3da4
- SHA512 056f6759b1cd6c724d7291f213a7f1632bcaaedda529fb74c53b6d3a4eee6038df72c574e1e4e1447f0afd1a0ae80d54c13b436dd571c88b64cc76394c2762b1
- TLSH T12F119693424A9B05D202BD7A0B13AC10F42B44230C65DA870657C1E0D4418E37E994FC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GW4N7G.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GW4N7G.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-GW4N7G.lnk
- Size 2KB
- SHA256 7d53e25136731e2d5e9bd13241c059c944593c3003685df1a3d50f7adf157f7a
- MD5 5b981eb612a49b8a89a777279a21bf22
- SHA1 f7e65734eac7959ca898832d40eecb58ade30193
- SHA512 6af9b5218e0f4a1e90e6d84545904b8f35a402759c7c2af568b088beace3eaa3b4a65fff47c79e7879140742d56b6669897343871b785fe652eb3d241faab7f0
- TLSH T17A4127512EED01D8F2BB8D76DEFA775089BBF9526DA4C69D0840824D0822B01E937B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.