General
- Target DOC-CWM4Z4.zip
- Size 590B
- Sample260804-kbf5bsvflg
- SHA256 48e368282526278cdbab29075118821ef2488cb5e7b90eb2ab9382b1613dccd3
- MD5 e187793a48032bf6e9d898d0d568fffe
- SHA1 4803f2af78e47250947167febc43a728d22ccbfa
- SHA512 d6471d42d56faee2e204a653c1d4d595ca59e2be15919773ff0d37afa834868330bf44480de5a84c766ff68c8db53c09c5719ce60d78206a12534a9116e2696f
- TLSH T1CFF0E1B78E028008C622CA7809E2F73D067553448FDA6B5D1F3CF8606E59595A6CE021
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CWM4Z4.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-CWM4Z4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-CWM4Z4.lnk
- Size 1KB
- SHA256 76018acfd4ed53f35f521c2e2381fcd08a3abec74f93817c17b7ad11076f2e6a
- MD5 301cd481f99a4eccf829f921db9a34c1
- SHA1 d893eff97d4794d7d4a0f93639d459ebd6247a0d
- SHA512 be83facac721fdf8550608e6d57bd36344cde52616e9a92f1cad6487edcc7408f52373a3d0e8c819fba58408b4488dfd8d890018826858092ed369798bdd2cbc
- TLSH T1133197106FFC0664F3F38E7798BB572485BBB9968D20C62E0040450C1472A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.