General
- Target DOC-S0E72C.zip
- Size 879B
- Sample260804-kbf5bsvflh
- SHA256 c72d82d269e566b233dea97abb42184aba8f0b8e14857774853dcaf39784e2d1
- MD5 8402c1a8f8790b461c957baf4024de43
- SHA1 05072d78b59340928c7fd81fff1992a542fb08d2
- SHA512 e80c5ab82149044edd8fe2835c099bff1dbf4370a5abc62d807bf3745b013f91662df8ddd891b1ad6bfe0fa95a3506c8b58761526fad96b0888c68ade410da8d
- TLSH T198112347C9039002C14AA8F90638428447069381B589FB46E008FF7A6E393E149AB4B6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-S0E72C.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-S0E72C.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-S0E72C.lnk
- Size 2KB
- SHA256 33ff1756c7be5496c571d1672b7a4af37981d5f65b14d6d58e2ad4c8c85e1585
- MD5 e568d6df5b7aa28beaf6c829f799f85c
- SHA1 aed6bc4ce962e31486809c3739e3ca412d426327
- SHA512 91fe31580ee6a99129977d89f156cc4c49084a0a5d7524671f6ce6d5ae43c68dbed874e3c00fcd569b2e608babe9f6f81aa071400ed25bf629054cdc0f0fbd35
- TLSH T1344147802AEC41D8F2BF8E3AECFE2B504DBBB9415DA1C54D0C50810E5422F05DD77B62
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.