General
- Target DOC-H6H7MA.zip
- Size 592B
- Sample260804-kbf5bsz1at
- SHA256 854dc58fe99f3f082fb7b4fc10628122b6f002d67e9f63b22786f5f1f906b501
- MD5 994b5decc03a47e4cbf1a69def396d8a
- SHA1 57618a2a08968bf4bd6f20953b9cf8a17eb0852e
- SHA512 5da866d188c290fcbdd6bf505977d4b0cc29c4d35152f1d6076026295cd95df0a24961f272f215171b255549939917f879956bad509938d9c4b49b2b5194bf34
- TLSH T172F026D7DB054B1BF53F84F0AA92F16977107BB964090E421C5CA9626D901ED9E8A504
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-H6H7MA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-H6H7MA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-H6H7MA.lnk
- Size 1KB
- SHA256 acda1ace9a136a4ee9d31623e4c7e2a0de05d9e83e6553429d463be68db86639
- MD5 38f96984eb78bbe8edc3a9cafe59cc43
- SHA1 e9706a3c084fb3daecb4a218d3e9aeef46f35d25
- SHA512 53ccca081875e1a465d3fc2a237550d7c92afd6dbeafa53fcb904fead2003b55a535a3a8dbf45c4bcf70fe2ef52a8959d455ae1dc767a6602209b279c16495f6
- TLSH T14A3164002EFD0624F3F39E73A8BB572089BBB85A8D208A2E0140460C5062A15E13BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.