General
- Target DOC-O7C86A.zip
- Size 868B
- Sample260804-kb2e9sz1et
- SHA256 b1a7c39a15d56b18185baf84306a58482dd86acc9a167e42f126067fa3077710
- MD5 eb7b0148f9b9354bdb71ec86d067f7a8
- SHA1 c622989d056229f5a9b57c050e7f309c6d378434
- SHA512 3197ce0ef2d233d3b47714cdd5af53cd98e988ecb5c29160a719897d2f7e08c46f5d809f556bafc13a2de8edacbc2ab7e5b0f91df4a194ae0319a56241d43639
- TLSH T1711156220F8D6149E31DD53BCCB1CE17D39732544A46919106D4F37356154B1E393325
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-O7C86A.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-O7C86A.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-O7C86A.lnk
- Size 2KB
- SHA256 e5cd113f97d72088092c69abadaa94f0c9479efdf6253de31937e242d5ad7b4a
- MD5 47edf850679b80a885a3868797941f53
- SHA1 7deb68ce70cee0d07ff3a8b603036ac48210260c
- SHA512 3fc18c1bd316f5d550f58ec02488998e24995de12a6ec433006c2b23166fad82703294b0fb4808e82d078e3ef84e1b59c74aa9968216af7bc85e23b3f2fe414d
- TLSH T1A64136903AE945E8F2FB9FB2EDFA275185BBB9614D30C58D0950810D5026701E577F73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.