General
- Target DOC-4TWK2E.zip
- Size 590B
- Sample260804-kbnt6sbj4v
- SHA256 a7da89bf7e59e9abd3246c9c2a264954d9b1b925a1f514d48f73a521aef35710
- MD5 bc8d18e18345dea0eedc530e3bf887fc
- SHA1 bff911e0b8d223d890b106d536c86bb565acbbc1
- SHA512 e59afd240d35987d20f828ce71e929b5729accd62b2e5bc5cc4258db055681fd9582418fa8e11231042778cc834b1aaefd9d1dbc96f947fc1a18124b477bb05c
- TLSH T1F5F0413BF2AA091EC900E5B8861A3E730228198122987395803AA22EE9D0F700CCB4E0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4TWK2E.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4TWK2E.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4TWK2E.lnk
- Size 1KB
- SHA256 7cddeadede2596042d01dd53d0747bc46df8ffcb842651331154637ec02142df
- MD5 f603710e67b896a072f6d155adaecb7c
- SHA1 56f75fdf61f8c36f5d5f992ccbc91d5222442865
- SHA512 90478111d743992031fdbc7e4461a6e1ee824bbc1220b2a49b7a62ffe521e622b2d9a766d96050093985363ebffd98a785c4f8da6ae131d1583e4797477796b5
- TLSH T1F53147503EFD0664F3B78F7699BB5B2489BFB8568D20C62E0141464C5032A15E53AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.