General
- Target DOC-1A9568.zip
- Size 592B
- Sample260804-kbmbcavfpc
- SHA256 d127974bf17082a953e02fb4af2334da7eb480e07253d11355166bea66ea84f6
- MD5 ffef070f0ca6438cc8d52ff63274b76c
- SHA1 377f149b367d8fd1b407f69b8fe1d0fde659948b
- SHA512 aea1a378f15ad41693a5683bcafb896fdc58819c8650695e1ca90a708ce30f950e8477adc1f4cdb814232ba7810338e1e33a1a677d071430df9c24dd870e84ff
- TLSH T1FFF00C3961410004E01EE0F99FBF023EBB5820001107A14368F8CDE905680E38EBC3AC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1A9568.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-1A9568.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-1A9568.lnk
- Size 1KB
- SHA256 73adf9f8f142fb11e6b999e866c33f0f0e0ae0f8129fd9eb62594c9f30be931e
- MD5 3a1e834957e5307ab022b2dcb6d0e971
- SHA1 d65ee33b892f94510dd493145fe3979ae4f8496d
- SHA512 48433969ea27b92f65fa352b5a9b2bc78b4fe290e2e22786c0913e190d144be10c83f38a6030363602647eb87534c3d79edc12bb4a8cff708d0479f3a211b2e1
- TLSH T14A31CB003FED0624F3F38F7394BB572085BBB96A8E20C62D0040450C1032A15E13AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.