General
- Target DOC-DDQLP7.zip
- Size 899B
- Sample260804-kb5spabj6y
- SHA256 992412fb32bce23e6c9ecd739b9704ba961af2ca1cd72b69d31cbefb51e17b72
- MD5 3273f1ee17391c62f08cc2c196058ddc
- SHA1 42cbe1ac25bd7e88816d7b960059fba8863ed426
- SHA512 d8ed5a49efc82afdc258e656dfceb775a66090ff932fef33a9dc77bb1dff136b4665cdcf9ce5bdb089dd5f6f5a8f5ccf8ea2bb3f048de5b48a2880ed9095cebf
- TLSH T1321144B385B421C4E7B286B1AE227E1D548A80904059220A94759658E7FE3098ECD0B1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DDQLP7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DDQLP7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DDQLP7.lnk
- Size 2KB
- SHA256 bebb04916bc344e8516447df802ce56ec6838e28d6ffffeff672e92e5e2e1653
- MD5 918132d3a4f01d79edf9685601964afe
- SHA1 99af543b1dddaaf9fde2e74634e9842cfb4ae1f2
- SHA512 e85a4508381bb61587f664d74757afbb8baae4e98798bf4ecfd2159695cca99edfcdbd7c1c37a774f33502c572d6e63f52e0140f5f9e559d10622c4975256dd1
- TLSH T1674147802AEA01A8F3BA9E72EDFE771289B7BD625DA5C54D0C40810D0822B02D577F63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.