General
- Target DOC-83HE84.zip
- Size 591B
- Sample260804-kb466az1fs
- SHA256 45832e5425f777a7d15c512555133516b2297d23df6fb7978c52fdb68806c597
- MD5 b8d44417c2e718bef0c5846b10c86cee
- SHA1 920c4a64929e837ae65d3c647861a5b6dfb6af5d
- SHA512 f5582becb070127331c9d6e0fc5c8556cddf9ad2580422477cef600bf93a400e0f78dba1cea9133d9e23411bfd04cc8864ae3afd9f1953cc33b128abae1cff0d
- TLSH T19FF0E1D6A9961C8FFC6291F8C56625F5083684540748FB61966CE2850B361DB661D2C1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-83HE84.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-83HE84.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-83HE84.lnk
- Size 1KB
- SHA256 3ed6dc556c115d8ab5ab6cc36b764f968f3aef247d1a8b85d3f2f81f40a1b07b
- MD5 7b81a46c5383769f23cd21c96f1823e2
- SHA1 7c9bce5498c19791a0f7d8bac887dd7d225b7eb2
- SHA512 f160a82c5963f961b5ddbcf41585e8f6e9ef5f18fabe18c2b020a15ad1a29b7c4d3e9e06e3e2f340858d15683f6229027b3c6a1d1abbce8d201db5a38cf349c1
- TLSH T1A53197402FFD0664F3B7CF7694BB572489BAB8698E20C62E0141454C5432A15E13BF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.