General
- Target DOC-S8Q8X8.zip
- Size 590B
- Sample260804-kd5wga1scv
- SHA256 4a6ffaea71e1ade7d0ba59e8a9bed35697747697587178b21106cb329de4b890
- MD5 1d6beee04d9b7b119b053c010a61eaf2
- SHA1 5d81179bbd01b28c7f317db646b079b0910ee5f8
- SHA512 3d5b0512085253131677cc55ecd21a8644e241b8bf9a38cd464a55a430ee5e0fcfa1e4551929c7c4dd8879e63d9cf96caa3bf4221d49a66d35afc90eb6845539
- TLSH T1AEF041013426D208D843C0BA3A40BAA910E85561290B827D813EF0140FB1B71E08D072
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-S8Q8X8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-S8Q8X8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-S8Q8X8.lnk
- Size 1KB
- SHA256 35d0237bdff90d01198dac84b38a059daa3e5866c2f9ac83cc618c04ffdf0f87
- MD5 864ad1df7c1ad0686a4ce729e4d2d0b3
- SHA1 7c39e6b88b953edb0831dff41d868e81543ccad2
- SHA512 5ecb9f14b78ce36f3af447ae94983ad86039dfb11c781a872ce07bc223da103a4a8435bdb5378a8c2c0c3149edc4e3818bb986d09511535a6dc1ab8759bbf206
- TLSH T1D13197507FED0624F3B38F7388BB572085BAB8568E20CA2D0041450C5432A15E13BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.