General
- Target DOC-0G2VT8.zip
- Size 856B
- Sample260804-kbm8msbj2z
- SHA256 091ef979a2a609f99ee53a37cc22c9ed2a5d4d61e9ac8ed3509c709b79497548
- MD5 caaf117fe10f4f694ed65ad79ff6cf3b
- SHA1 73972e361819c9b4eae0adcf518ad4a96b4c9fd6
- SHA512 f64605316845295fa98ea840a0339ac99070ad263a328e6b819794fd2a6d94bc5e2b5b174b9ba73d0f680f66e09c1488cf448965001659ac66047fe104346833
- TLSH T16311862B5F72C31FD55667F75904310420D9F82341898F2021F2A904AD68A22B3B5E31
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0G2VT8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0G2VT8.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-0G2VT8.lnk
- Size 2KB
- SHA256 8ec6106bf637e259c2abcb6db7d4ee0be470f8a196926b3f154c414390ca9093
- MD5 3cac1b717fef9730d681a691b97af002
- SHA1 7d70c4d655f5df1f88bcea268421707e6e896a9d
- SHA512 34d06cc101f131e6847d585a0ce5d7605afc73f6a717c2d5c70b6b76e6dbecb8d713ba69413464acd504c8ff70253db3b98073b11a4ef38121d4d587236cf557
- TLSH T1054148403EE900D8F3FA9F72ECBE239049BFB8A55D60C68D4950814E4836B05D577B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.