General
- Target DOC-OD6CRC.zip
- Size 587B
- Sample260804-kd2ttabk3x
- SHA256 13b6719f211ca2e81a1b138e71b52488dcfc0064f9d6f8a28eb668dd5d4c3b76
- MD5 9a98d5d9d2d0ff6586fa904fcd287f0d
- SHA1 a4b2a5a0bd918febc18ea714a5a6e3533f7bc8a4
- SHA512 b2e02e2a4276ce4ba8ac4c125942c30b235cb151be565c27112bc0c97b6c07c22f0b62587c6be3dc60e8dbe40f06831d8cd4232cdff206c41c0dba43bf2b9e3f
- TLSH T13BF096B6C498C46BDFA2C0B0837396C854996944C13AF62B1139E044E3F22528A04C70
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OD6CRC.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OD6CRC.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-OD6CRC.lnk
- Size 1KB
- SHA256 8418b9d81fc3f374a626e77814e4dc2e093278e009c2416f895a869c3c63b711
- MD5 619914190b069f2ead5aacd9e71fbeb3
- SHA1 5f4c98273ed0017bfb0bd9e994288619c6fb2209
- SHA512 b92b102dee0de93635d201502a5dabc18b1e92dffce933e29c549121b00a21bac1795bfcca852b4d3d0a4ecfc7329c2077e91cadc68dcf75328f581a79af46a5
- TLSH T1F63197502FEE0664F3B38EB794BB572085BAB9958E28DA2D0040460C5032A19E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.