General
- Target DOC-4RUG9H.zip
- Size 587B
- Sample260804-kajttsvfjc
- SHA256 82875b524dc2bc6f8b0c4989a2405d52b4eb713718fdff8829cffa74d84dd081
- MD5 a8b7239ee2b9ef2bd0d42eae23ada9e5
- SHA1 399bd22d2dc121a433bad0efd846cfedcb18e06d
- SHA512 848784156bb81e82c8e6814f9fad2671a6505b27107fe58ca2f815b3dec863d30d2e387fc7ee8518862db8a85c54d049777a2117213e85ed7f1710d3b46df767
- TLSH T11AF0E106240AE5A5CD21E07C754A3394C05A86F9641F6E87CE309518D168899F9BC04C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4RUG9H.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4RUG9H.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4RUG9H.lnk
- Size 1KB
- SHA256 2bdbc5e5b29f4fa4668ebcebec0153fbb716b4e266a09039c2a7208756774f19
- MD5 13017e859f7eea693dfbdfa618f3b3a2
- SHA1 e59555b05d32895f11dadc5de452c6a5a82797f3
- SHA512 7651c06b12d563368cc9224fd4b045285a460db794fc7f9b225b5c07ba7d2d751926028a11dab40f005d931ec35af0f52cb24e97690936bd93bcbd272ebfbccc
- TLSH T1A631CB003FEC0624F3F79F7394BB572085BBBA6A8D20C62E0040450C1072A15E53AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.