General
- Target DOC-HMG61A.zip
- Size 813B
- Sample260804-kbraasz1ct
- SHA256 21f7cbccd7fd1423eb87bacd0717a6aa21176f6afc0adb1f505ce498208cbc74
- MD5 612f909019254b5821246d79cbeb2519
- SHA1 cbd9aeac52145e20cdb33d29e72b0f51436d159a
- SHA512 29c291824926e6539c817ca8bffe1e2a790a2f902d3db8fdfa1ef9ba2e279e9afac6640ba385ea4ffc319bc1e6d1533166e49486a4825227002b7c76b45937b6
- TLSH T16E0141E7A5AED4E6C486C2BB0004B92158799473805F52DE3A31B5361862AADA955C01
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HMG61A.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HMG61A.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-HMG61A.lnk
- Size 2KB
- SHA256 b87fef4ae8537980c3b04dec1be7ed78f08ce64bd4b2c4c7b3d22177892073d6
- MD5 b5885604eb384046a56bafbef4ea73c2
- SHA1 f119d1ed25939c5879a4f91f1b24420049c32a60
- SHA512 97576954d32e7ec987558e32d07ee46d0f670dc819945eb7777d2b7ddc07ed0a0b6073e22832271b15ac8daed467866e34fd0911e82c730aa61abb92eb6242ed
- TLSH T1DB4167503AEA00D8F2FA8F72DCFA776089BFB9211CA0C69D0840810C0526F12E537B7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.