General
- Target DOC-7RTP6Y.zip
- Size 903B
- Sample260804-kajh3averh
- SHA256 25ea9378a4addb133c2316c0dd75259935d9860d8103b2a5b0293741bf4f790e
- MD5 7b10ff729bd6d5e99f36bd65816cfcc4
- SHA1 15bce03614d477847027b5c1d96396de9dce7f6f
- SHA512 a76b0db27d125c46044882103d6cafbccac1e156d17bd553cd0be0545c63397d4c2a2059be829a9428d688ffb7edc90cf3dd8590cece471560ad97bfe18c3c7d
- TLSH T19411B76A26DF4D67E16527F3AA0BC7F16009300101EEC002CDD8F9388E545468FB0CC3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7RTP6Y.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7RTP6Y.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-7RTP6Y.lnk
- Size 2KB
- SHA256 ea39c189b0ba345018b8502ab3eddf29f6ce1b455015612a85225b0df6388483
- MD5 cbbdcde5a84098a76c684376d9f1749d
- SHA1 fc0e7291bc3fbc0cd3a927f9db43a261adf10e6a
- SHA512 2795ca2c0e6ea815df0df157eee1010f34609b058d72bd1d3556d78ae68f3edd595b814e1f455616886c02637eb098cdebacb5383a6015741d4726b5fe260303
- TLSH T12D414C903AE945D4F2BF8E73EDBE3751887BBA625D70C19D0840810C1825B51E937B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.