General
- Target DOC-8X7FB4.zip
- Size 912B
- Sample260804-kd3q4svgpd
- SHA256 ca7550e9d613869bfe13663db5521809be0bee85df014ccf3cae1333dcc00595
- MD5 a6e7fc1fc2a828087fb4866d4d3d9858
- SHA1 11bb01d6aaea2c35d0a847042551294a397a0d74
- SHA512 91a6d7eec940b4a05a7afd07c5c018347715eea0718441e4beb7c725528ae4f31cff451a9eec2c67758b6fd47856c8a4b251f1d3c6917260c5de99f1461b3500
- TLSH T1D51144BD815E0E8EDC6865FED3726701866015300376A69906BB9BA49F0384D174CA82
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8X7FB4.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-8X7FB4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8X7FB4.lnk
- Size 2KB
- SHA256 cd87b1b7846cea64caf78e63fe1792d8de8a9f1ed4897172a0ed2eec786e3e16
- MD5 b00e62b859b4d2084d773fd57db3bff4
- SHA1 71edcf54ed0b01cee727ad5ce3fced8518c41312
- SHA512 1e3ff649a191dda8d4a72e037a9e3cf97b4821736e7dee293c1d973e57baf34d50fd927b8393d32bf19307d067d25443f93c7d347cce4b75ae2bccae50bbefed
- TLSH T1974148902AE94198F2BB8F76EDFA6790097BFA655DB0C65D0D01810D0822B01E977F73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.