General
- Target DOC-57P7FR.zip
- Size 870B
- Sample260804-kbr7lagb37
- SHA256 e5a738888790f503d1523130c2103cd71093dfa9549b5f0d31feb4d4e208074a
- MD5 0601381de91eea22d7ace7f4f6284ff2
- SHA1 f7d5034bce059c0fcc98ee9bfc167db10e2c4d6e
- SHA512 fbeaaf1f1c9ee94ab3d7c0a7928773d378771208b86076539d610aa37b004a7930f1331e0c60bb5546a8acc8acc6a250ba60c96a2746fc0154667a435a5db7da
- TLSH T119119691F1188E40D7046C7542D3D961A03721F9B52B8624A6B9F24A3A4F047371D3F0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-57P7FR.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-57P7FR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-57P7FR.lnk
- Size 2KB
- SHA256 0f27565e5e5a76fe89b190f9e787be61e90d6ccf126cc65cb7932e2f87273f66
- MD5 a4f8cfa10d173f0244ef656ddbfa1e00
- SHA1 84e91827fbc5d78a30cb21b35369d6217bf2604b
- SHA512 7ca40ee2399c73c949984e87914a20c2e3d9d863a1121bed6b508e2c12c11d475dd52fa87b834479cf175b5c8f5ed99a65aed9e805db6ab49902308b36144e65
- TLSH T1794141503AE945E8F3FA8E72D9FE671155BBB8505E74C54E0880924C1823B02E5B7B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.