General
- Target DOC-I3OFV8.zip
- Size 591B
- Sample260804-kbnt6sbj4t
- SHA256 131203694222124abd5c0cb80212be76eaa7a52627053cb423ffc2e5f35c557a
- MD5 8dc405f30167ce2a763adb0531920b63
- SHA1 70493a29f66c2da3a762d753edc2d84793fb17d1
- SHA512 79fb0f458284ae85ed7452b1bf67ca2f501f929b7c50003abb1d9dd75bf0ac8c9fe9425cfede2a5f10256d47e695c5bc9dfe500400f41f265873750a267e8237
- TLSH T131F0261FD2005E95F01DD172D5653A407259AC452D5CF7336624D90F97F08AADF15F50
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-I3OFV8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-I3OFV8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-I3OFV8.lnk
- Size 1KB
- SHA256 d2e0f9ca17008b4367fdf696434145436ee76dba5006eb045a98ef8c897cc526
- MD5 4b177e575a001ab99aee43f0b686205b
- SHA1 469fcf1a1c170c7e75413ef3d7690a23d5442ed9
- SHA512 b72f7a8c2b14c7c9bba2ff63bfb411bc4655ee38192e94cf7965a8a9888c0a41bc3b6da6f509c7a342858eb8753875da3db9c869de7a1437dabfc091992544e8
- TLSH T1453197503EED0624F3B38E7394BB572085BAB85A8D20CA2E0140454C1432A15E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.