General
- Target DOC-495MLX.zip
- Size 934B
- Sample260804-kb39vsz1ez
- SHA256 73a344979c553af073fed7c3fd2c3b20d04180beb7f4e68bdc0f948f80d4d393
- MD5 ac986fcb1c6d4e9b3a452a4233a47a06
- SHA1 9997236f69b9397ad504419eb23d91bda05c1c90
- SHA512 f35340ea64c1a69dc33bd2b0c6573fa66054b75a83237cc4b657a28b0935ce224b847a02f556eff811e6511d97a158298a55478e70913b3221b80834b77f0713
- TLSH T1421184B3891E8C0FE27B26F8987637C581E0705255AAB4470F3856DAAA065A51A24E03
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-495MLX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-495MLX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-495MLX.lnk
- Size 2KB
- SHA256 be82f81de36d53c2751c4cf93ab536a3653697cc8646a0d290c8efbe38d3c8d6
- MD5 9f155923791b734cbb5304486406f79f
- SHA1 07cd7d88ad21fc6b1ddae866938db95339c77fad
- SHA512 02eddc232085dff822c7d62cb1f0384def421df285c4bc46b55faadeb4ef8409bf3cb32bba45f972aa88a8facfc9f6921a0b9898177c0fb7fe8098012f208139
- TLSH T1834154812AE901D8F3BB9E36CDBE3B4158BBB8221D21CA8C0940820C5822B41D937B66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.