General
- Target DOC-B7YEI9.zip
- Size 593B
- Sample260804-kdthfabk2s
- SHA256 5087102f40d7e44740ad7a8820089abfb11ea3b1db83ec318d770a38e8f0e9ed
- MD5 31b293f2de1f5ba5b9c359b156b3474c
- SHA1 46a82498e73f4ec5f8f946233e0be3a1cf81b452
- SHA512 916f6b974bcd90ad6d00bd99c3e6eb5f283699df942bddeeed51f7654d35a9818d8a32e95ad6a6d9b0d93c805c57a14bbbc4c187f381c980907c70521158c0c4
- TLSH T14CF0966D8A230544CC2F6375B00E849903B07DC07D0E9313406CEC09FC518557AB4C71
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-B7YEI9.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-B7YEI9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-B7YEI9.lnk
- Size 1KB
- SHA256 ec9d9c98ea5de985eed6895029b2e82b8241216b525be83ca088c4b4b01c60d2
- MD5 7e0cb7b2a6ca6b8c3c8b44d5fe2f48f7
- SHA1 96e4cd1c3cab0188149be3ab4fc89a15c3d12e8a
- SHA512 e53fee3f7cc8c0a8413629f1715aae7e12cdf79cd3e0fa93e376e189fe053a1041af36ffd81e0b95c86e61d0b3d3d14ebe6df2a143c688278bcb129ce52240cb
- TLSH T1F03197102EFC0664F3B78F7289BB972489BAB9968D20C72E0141450C5062E15E17BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.