General
- Target DOC-1RTIYK.zip
- Size 930B
- Sample260804-kbmbcabj2s
- SHA256 a6105fa9b78193cfb0d63b22d0c7b3876f0dd8c3077df350b505ce151e10a1c3
- MD5 bcba14cf019ace92f993ad8f65f40cef
- SHA1 1580eb29eb486c8db3fb1d465e443609de868c0d
- SHA512 20da998257ee40caf5591224683d7d03f1ac1cdd452610edf9ba1e1c4056881a5cb28721005486ac39207721b98e311840b3b0f0b12aeaa5e6b43d332c714027
- TLSH T1BF11EB77F43F6165C4C15C70B2CC7C9F381A78E4231E1703956D7CD9D2169673AA4204
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1RTIYK.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-1RTIYK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-1RTIYK.lnk
- Size 2KB
- SHA256 fb21cf6af1969320dc258588ec11ce25a57d1ab8ac62ba101ea89dc4b11fb835
- MD5 5eda1cf9c5bb704f4c76a5c0b516f500
- SHA1 6cb72e84e462c503381ccf8730e7a9a47fd689aa
- SHA512 9c3e6426e1f42fb69f8b844a9c76bdc9017af9bedc4c520b5895b501ffaecf67c341effc8a3b45922ae2a1c387f98bc1bb13327b4af3fd9c0a258a8ec287cd29
- TLSH T1AB4105A029ED8594F3BE4F36EDFA6B11487BBA454DB0C28D0841824D1422B44D977B66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.