General
- Target DOC-UM9EA4.zip
- Size 585B
- Sample260804-kbnjeavfra
- SHA256 113b775acc30171848b471aea4f12f317a04b7e8231bf1476689c6d633cb8336
- MD5 f13fa21697733f29e0c9d92264fdf626
- SHA1 d06d81f51fbebb3134021422a1299eb31a43579f
- SHA512 df5500b99a8946b3229e42c457efb2cbd276462470fbadc053d8d212e134d058ffbead8dc798470486da9d320b75a4ec82a8ede7bcefaf180e82179f0114240f
- TLSH T176F0966E972D05DDC912C2F5C89B59460E0C6100409A2939033CCB4ED83A2712C90780
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UM9EA4.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-UM9EA4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-UM9EA4.lnk
- Size 1KB
- SHA256 dfcda38e28d9b7677bfb29fd1abb7c21a2ca3ed5a79d4b69b276282c11ac4f1f
- MD5 9271336d42f089d381e6242972421d4f
- SHA1 60c7415a64ad4d55b0c9ed44ecec6072a676cd8a
- SHA512 db01cfa48b504a9fbc2c916967da269f669e16307cdc152452fcd91bee3258004c468d7a147667c08d3588ba8badb3ec107236ff3d220809125bd30db54a288b
- TLSH T1133197103FEC0A24F3F78E7288BB672485BBBA668E20CA2E0140454C1032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.