General
- Target DOC-X7RY03.zip
- Size 588B
- Sample260804-kbnt6svfrc
- SHA256 b7a2adaf2009f7caa04925812f8dc9daaaa0c4ee1e2fe23967e500d2a31f073a
- MD5 f0c328cd384fdcdea04601e258dad8bf
- SHA1 cb7a3fe603f0a5bb5e3d0a3f66a19e0c3cd7a839
- SHA512 a51eb44754649627b598e5a1f903045f2bda02cadf7d712c76d30398e436cbaaf0df2d4777425f07f0e5e55d0d80c57482d4708e2621d1aba55baa07fff10145
- TLSH T16FF041FB14285A08CC69417744117E7883095B2306030A8A6768C8E9FED88036EAE8E5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-X7RY03.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-X7RY03.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-X7RY03.lnk
- Size 1KB
- SHA256 4a4e72531cb85e5f0e4612c1565a8ae1342de4316081e9a7c112ae9b6a176b70
- MD5 afd0465442ecbe4f0b1519ebeeadbda0
- SHA1 ae608c09be79b9e55a1a50bcab61dd28c4b76de2
- SHA512 67f8a6c5ba726d420b14901513ce39132b0b16665f157745e85d61d046a03edf0d558967a0e823fd263fe4052edcbdddf25ae702bb821a1f48aa1c3561bca243
- TLSH T1D331CB103FEC0628F3F38F7784BB5B2085BFB8A68D20CA2D0080490C1032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.