General
- Target DOC-DU72O0.zip
- Size 859B
- Sample260804-kbjv8avfmd
- SHA256 750ad7f5cc2133a43e3a3a2ab06682533288cdaeb1a956a627c6fb96d01ce50a
- MD5 3da91ccfe271c8c908478dc85e384d46
- SHA1 1e08ea1effdd0959511051292a13e5633dbb3bd5
- SHA512 983e2554666a2926a3b7898426b518e3a3fdcf31e801b0ca541f51d0e2664c7eb90fbe84ffdd347c7cc259b3eb589784098b1f6173f30d21c047a38b7c96f93b
- TLSH T1BC1186F2DD43BF1DCB97857693410DD5982C7DC454CBE95D457D800667B20590A0B908
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DU72O0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DU72O0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DU72O0.lnk
- Size 2KB
- SHA256 9a12aab85ade2ff266baf70efb7f35c0885643549b51ae4823411c3899f0330a
- MD5 c5d7269517777fa2581f119cff641f3c
- SHA1 922db108953cf5e3b6250c862dd9b274a3a6784a
- SHA512 e43cd601426c7ff96e3b372d121fc556685e5e7ddde71feadae9b7ededa30ef26507ec7a53449b52dba24afb334f12b22ffa60d84f182f5a08ca1ec2d672db0f
- TLSH T1D3417D903EED05E4F3BB8E77E8FB370549BB76425D60C68D0810814D0822B01D93BB57
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.