General
- Target DOC-3CH41Q.zip
- Size 902B
- Sample260804-kaha1aar7w
- SHA256 1d1a06df423a1371675126b673cb1ea72a4b72e28969ef13fd177882c39be500
- MD5 4d523016006a4e3936a6353c983455fb
- SHA1 26e51cfa8708c5f64b48eb8f91b26bee76b43e4c
- SHA512 0db76b4a9ae567b440a71099df0797902b0589c2b29ee713b0fbbe40b2b7f930c3b40e28295fd1ff51b712319c5670e75bd0e837d858f0b272765cc4d7728433
- TLSH T1CA1144E391045D5AC6007A3B04E2A6D760D2D9490DA74AE30D1DD493982C8181B5D2F8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3CH41Q.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3CH41Q.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-3CH41Q.lnk
- Size 2KB
- SHA256 85b0de0d429105511ed949f29494d27675ada82d8b84d7810457ff869e56d7b9
- MD5 e096228029b5cfaa1855bef33d544df4
- SHA1 5f93c20a2a5770f9903357cf314ccbacfc0a4315
- SHA512 43ac556d377f990ae9eaaa612b8913e650e2acabd5edca1ec429e43a8b6baa6a228145752db1668d4f4c2b96a1f60ffd984ff4fc0bc8a71870f8b25045487c61
- TLSH T1544179602ADE45C8F3BB8E36DDFE7751887FBA526CA0D58E0805810D4822B01ED77F66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.