General
- Target DOC-4DD4TU.zip
- Size 927B
- Sample260804-kbnt6svfre
- SHA256 c4d27606e4a81a7814c56e7f675d0ead7818c7c3d3be777f8ab2c7e3596d1878
- MD5 6f6169f1f5ce511b1fcf7c93626caa38
- SHA1 8381437226938c6a5a8d8aaefb300a6f51f73a03
- SHA512 6b7d5782910cb6814fcd6da1bb5c81db758324d91985b5022b89de228a304c611e22adb1ad4c16b376b37bc6630f73244d7b7cf7bb12f41a3fc49eab71cd8e20
- TLSH T14011B7C28D2343CDDE0C51B83032B204DB09940FA31228D374A986815F350979CA2BE7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4DD4TU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4DD4TU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4DD4TU.lnk
- Size 2KB
- SHA256 6d50e26f4ceba73e4e1effa91a6174b4a24cef041636d15005341b89a37fe1af
- MD5 b4831c625d438a91562dfa7b083cf39f
- SHA1 03711ea3c80b639bb3acef20f891ee584c256461
- SHA512 2fadb7c2dfb84fe1120429b792679ea634f94a8307db0a49196f25e7d807691a3c285924d47c5192971d4e6fad340ed68f730d98ab263f580aeb6ee46a87ba59
- TLSH T10D4103612AEE40D8F3BB9E72ECFA67A4067B78526DA1C59D0C40810C1921B01D577B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.