General
- Target DOC-8F2P90.zip
- Size 584B
- Sample260804-kaha1avere
- SHA256 1759663a9fc22a89d77fd3bf4298d29885fdf34aa582500c8f761ed0f0a9a836
- MD5 63e4f921d510565fe710e213c84f77e0
- SHA1 2802ad7731746ad6da2be8dde774537dd495f0fb
- SHA512 4be2e9b24025352e1f2153db6c037839aeea9d0dc00c259197afa65b4e90b22e18ec64ce0a93efdacc9876b1822a0fd53e36df3961280d0baf467f3ba966b9d7
- TLSH T191F0E1518F0C9C2DC804D2F4DA6520D6565E06E2965A058A70B4EE8B35763D53FCD095
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8F2P90.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-8F2P90.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8F2P90.lnk
- Size 1KB
- SHA256 081896030fe86ad9c5864068e0c1221d28e7ae1fd22de2ecc9bb28b30f3e0846
- MD5 8b15ac9b50c75704836ed47833046eb9
- SHA1 389e5260852ac83f81fd45066dc6c74696dba3eb
- SHA512 fdb16a29c4c405094f3934ea135bb46520505c4b8744c9c4e4fdc18f35b502b93f88c5ef7386cf67dc31039e86251ab146b05d2a1f48581e6e75d392be2a8e50
- TLSH T1AC3147503EED0624F3B78F7794BB5B2489BAB9558D24C62D0141464C5062A19E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.