General
- Target DOC-6G5OYY.zip
- Size 951B
- Sample260804-kbraasz1b1
- SHA256 0d7b3d1ddf82095ea86c67829080439493624e38a9cef14bb146b7bcbbc83430
- MD5 bd8391a2351a059dcc4480eb3b756f45
- SHA1 4565ef6cae31b93280bb33bae0669b37cab1d636
- SHA512 716973479abb61d6821a8bd2c62485a6158c5bee53ed1b5d0da348a2756231b4152016579d7edd095e9c74023e0e81e13999c71f9730f6cc5cd0215fcea93224
- TLSH T1C211C82A52C64024D8B5CFB2D03EE94E01405426E0D93DE3211D188FA490DC23F7DDF7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6G5OYY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-6G5OYY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-6G5OYY.lnk
- Size 2KB
- SHA256 3d12856f2d62a7cc88926369ac7b1f55e2b5dfa7fb7a8fceae5e44a4d3172439
- MD5 c46109a6b02f92bb887be39acdce8bdb
- SHA1 cbe3d1f599339e12bfd416637d2f2437887ec942
- SHA512 a03fd2233fe96f2d73a18e0ffa10e3ff3df2632ba466f776c1a53d11ec6de33891c4dca38285ae761b56e720186bade38b8aeecf5007ba3c77918781e0fc7871
- TLSH T1D751079029ED41DCF2FF8F36AEBE37D1987BB8556D60C59E0841824C0822B45D576B62
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.