General
- Target DOC-6T27AZ.zip
- Size 585B
- Sample260804-kdswxabj91
- SHA256 91d2d1c558abd881a97394b7499ed7aeed8ff5e1026e29eaf349c203f6c70b7d
- MD5 fb9cef3fc58c05f725b77b8314256b97
- SHA1 9ea39bbd8916ce8c51af1d4dbdc76337e30e9800
- SHA512 093ab24ab667f7c653efb6a1faa91e8a69028d8bff0b0c22b0046cfca89682ee604a2435639a507a74f06e9c631ca8ca0106659b05a6d1363f0a538408117786
- TLSH T19AF0E1235662552CEE11E2FAA42A32D51F552D22144B3A8D348CD11471070BDBE675C0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6T27AZ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-6T27AZ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-6T27AZ.lnk
- Size 1KB
- SHA256 bfbc8ddf188728e42384ab3935bb9054783f18477a4b74a81a1e379aef1c61d7
- MD5 b1adaf0645f9bb8a96deea4e77d6f52f
- SHA1 8b02aaa84b861c52815ac6a39d2d936d5e5548cf
- SHA512 5bce9044aac4374c25960d8b6d0880efeff02a1e82e884a3ab11c594cc067deb6055ec9fdc6b4d5634132f4d6d57ecb504d071589167ccd03e163d11c2fc10c4
- TLSH T16E3147503FED0664F3B78E7794BB672485BFB9968E20CA2E0141454C5032A16F17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.