General
- Target DOC-G096YS.zip
- Size 948B
- Sample260804-kbmxwabj2w
- SHA256 8960c9d5d7555968e46a1d38a76a9a4c4804cb83511c9760ebd988e2c17db690
- MD5 d2a62182abe7a36568d5b00fd4835a09
- SHA1 7f35a6d16c3c4ccb7517f7155dcba64632e67129
- SHA512 9f99d9396aeb2d109084eaad0e3868e66d5db90a89a460d6414ec9ea1aa87e77d6a4e727b8e7d5f99902eb5c37f973cbdca42c6eb9d728fc734bff6ce8a665ad
- TLSH T17F11C843C9C5D89BF4D0CE7096A5214290FD4740C5EB3BA79200F0F6ECD84DAD600120
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G096YS.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-G096YS.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-G096YS.lnk
- Size 2KB
- SHA256 d2b67ae44e780a2b62d798ad8579ce9e87c7a54d7eded0bc112276a364c3e51c
- MD5 b80628043fd08dbfc53f478c1ef392fe
- SHA1 0c3c8b9807eadf725ed20eea04c28db5c866bd05
- SHA512 17f4c0f08a2e5ebdbdb7d061e275ebd9e5c83cd3e25ecaaf4df65e4e3f6ce9df5fd0a5c28f57719f49e647edf5b91c31075d622dc1ef5e38b87769e67cdd3cf9
- TLSH T18851E2802EEA4598F2FB4E72ECFE7B414ABBB9256DB1C54D4801824D5822F01D976B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.