General
- Target DOC-W7N5O6.zip
- Size 955B
- Sample260804-kbraasz1bz
- SHA256 62aa0416ac367b07280dedb8c1cba44a865e661497bb1cdd3762ea56371c4341
- MD5 9c8752da24f4884487bfab517d5be512
- SHA1 b2d2124ac980318f2543c47c6cbebe3c10ef4d68
- SHA512 1e66b92d89d95e3e877a16d04b3804381842375440b17665289519c0e65484d5f640b691f7589c452afd2367c4d79f5ee2e0e2615390602afb45ce43021e7c36
- TLSH T1FB115021D6710ED1CAC24F78C23C31D16604444B406AB7371A7EEA9A3C82BA477F1BE7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-W7N5O6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-W7N5O6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-W7N5O6.lnk
- Size 2KB
- SHA256 339513a23af2df6aa135dd1218497ee6d603077383da39e4cc52e9d0293b1e15
- MD5 e57ee2c80f2cf107cd8066fce7814094
- SHA1 e04c7e5cbf8d3888888afbef562d090b7dd420a3
- SHA512 8db3e0d8a6610224dd3e61dfcb925abec17ff9cb3b340c24e75201bd0c85252c93522cf60fadc474e13b6650ab1dc3aec302c290ec95d88e2a48be036a827187
- TLSH T1104108903AED1198F3BF9E72EDBD6750497FB8512D31C55D0480824D5922B05E972B37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.