General
- Target DOC-73I48S.zip
- Size 584B
- Sample260804-kah8asverg
- SHA256 dfed46f0a54425298645c6385a1b7f152db7b967773df930b219862e7e16d0f5
- MD5 be52b3ca6197d22411a7b84a54398bcc
- SHA1 aea73dd55e45f2bfc00a91a8fa62bd46d035e8a8
- SHA512 882ae7e2a47e350152355602d898d8314dfbf1a092801fb0982599e74811b6ddb39c4bfa75501d4d4b23a1b1f0c10e60c6314186c51b415abb1bb9fc975d0e57
- TLSH T15FF0E17D32292A90C50596F5347B053077282A43686E93BC2A5CF00791154912E472D5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-73I48S.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-73I48S.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-73I48S.lnk
- Size 1KB
- SHA256 15c05b2770fbc8691d95867946dcd634ed5d1e7b581d116852f4eb04c448cb01
- MD5 95f7b3bc348d1dd9f5002c07fc27a42e
- SHA1 5c5b872475765560d18b5d99e5efb5b417780310
- SHA512 7d4ad4b610108fda6c2a515a7306a2f7a38923a82a1e2e21b8c0ceba957f53b5996073b85dd25a14a90842962bd8e893b242b70d16d88fe50f98602a8b80b03f
- TLSH T1333147502EFD0624F3B78F7798BB572485BAB99A8D20C72E0141454C5032A25E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.