General
- Target DOC-SIC8MN.zip
- Size 587B
- Sample260804-kd3fcabk3y
- SHA256 9bc44aeac906cbac5fffd842187f0ddf4a0508317134d8078946674388e067c2
- MD5 65ef7d0823903eef321fb1e7285c1e5f
- SHA1 e474fc6d54a968d60991f48d4dab19d0a7d85f5e
- SHA512 aa386bfebc9b330edc93584e8f6a6f484471d699eb85308777aa50a1d0e5a953cb10cc6097fea0b9f2f7aa1dfb0b139f2e591540a732935d6000c97e8c9680c8
- TLSH T1F5F0413381418422C4A2407C03263E232C220141C0967AA8B671D54BBAC366BBB5EAE0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SIC8MN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-SIC8MN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-SIC8MN.lnk
- Size 1KB
- SHA256 53ce4f06eba536d5b64a55369609de87ea30bb37e71aacdf2251fa72e72b5a21
- MD5 fa0fea03467275307fc50596d218d908
- SHA1 9afef1e594e206c7ed037f8c281093d854a14175
- SHA512 dcd0d65c4170ba2b80e7d91efb30e1b3979b5f20f67ae0afc1fdc8bcc5704b384f2d59c318e7ab31a3b175d55ceea50e5f5a8cc6b117fe62e665300cdd00d9b3
- TLSH T1983147502EFD0624F3B38E7694FB672485BAB9AA8D20CA2E0141454D5032A25E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.