General
- Target DOC-7GT03N.zip
- Size 586B
- Sample260804-kbmbcaar9y
- SHA256 c8817b1d78984ca9b24bcc244d1e34c135abd3d106db5149356a9305dabd2b17
- MD5 3d7d4197076e8618cd0b6427e0329b7b
- SHA1 8e82bf50c1585cd3ed6b7b18e3929c224befd7fe
- SHA512 9bf82452f4aa41f23419bffa1dfa14cdf99f4fc08f2c096d108db2b623ae9c0d9469ee8c8f0c7faea22d54bce7e0ff61356f299b58930a47f0c16b2ac332a37a
- TLSH T17AF0E795BCC80650C2114933362275E10670D59B315E535651A4DF5648F01556896965
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7GT03N.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7GT03N.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-7GT03N.lnk
- Size 1KB
- SHA256 fc7392e130aabeca5dfeb66467b752001626605519f032947ca2e0adc1384df8
- MD5 b420edf708f357f22b51d89d6cb3d5d5
- SHA1 8d5d507916f2d3dfa7ff6393b9d13a1a27e051d1
- SHA512 3f3b5301ba27fe3db64596efc23900d409bdd615ed8c22f00f30f8d154e3337b66e6962d7eee6cd92b0a97e967af0d883cc811e1df4ba2c1f2988d061796bc06
- TLSH T1413197002FFC0624F3F38F7684BB57248ABBB9668E20CA2E0041490C5072A15E17BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.