General
- Target DOC-4EX27C.zip
- Size 794B
- Sample260804-kdqrjsvgmb
- SHA256 961ae933e6e62ee2719293c90a9a0f93d6ca2fb6ee11170233f30547281e3945
- MD5 1fd51b390a57b03e6f347c489848278a
- SHA1 16c2ef8b964d3f8a3f2a45a41aef37ecb0bcfd60
- SHA512 7df4f8339b8bbb1006bff740809fb79cf3ec0904155b16cb673ee9c07c24ef65935812e2a5a913916fa4e2e1aecb66bef2886a902f9d171ab757d841191309ae
- TLSH T1AE0141B7AAE90323FC90B1B74011A3A9840AC133C04DDD59687A2D58DD089E91C8C671
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4EX27C.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4EX27C.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4EX27C.lnk
- Size 1KB
- SHA256 5798464184c9510d3ff2ac9a2d951002fb8cc40328844c63ad9ce83d0bd0845a
- MD5 52e572f05aa8d0cf3012cb03221843e5
- SHA1 7e593bbb0bd3f0c696677dc6dde3d158e4fbda8d
- SHA512 680b13b571aea5c38212b4a68fd024778e3d5a2e86bf5c30a07e11f5e2e5bc46bc21775f6af7cad6b4f37cef268adcff91178cb2add58d5524bfe8764532f779
- TLSH T15E415B902BED01E9F3FB9F36EDBE2754447FB9929D20C58E0450824C1926704D576B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.