General
- Target DOC-EBH12N.zip
- Size 919B
- Sample260804-kdwmssbk2z
- SHA256 c3fbcf0673b603d1e3a572ebc83cab75181d2d80db48f55755afad57154b17a9
- MD5 7601b6852f747b2e81c4899c42288fab
- SHA1 e0977b2189a2ee3c785960b9fe3788a1df49947a
- SHA512 a506082634c290a573be58d8d8e59f8eefac52f0581bf23815f5191897d726170af385c10434eca30c5dc785f8831eb68080963e1cec5821dfb628e3177a86b9
- TLSH T14E116332C44B10ADD4E00BB2413D9A27A25137F575A7890D1EDDDBBD4C718E11D24F56
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EBH12N.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-EBH12N.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-EBH12N.lnk
- Size 2KB
- SHA256 0eb4cc0c085b9a7eea0dfe2d8e58ebd936834e4c63d5efb4dafbbf2f8f2f8702
- MD5 15e197fd22dace74190c0359d9465988
- SHA1 a05f3efb1a9ee8222165a4399e6bb499c6166430
- SHA512 f46a0c81639c76a16cd23f2eda85b498d64f63e08e52ed0faa5d9639c64f33d520e296dab9ec7e3baaeda178acba62e2697228dd6ebd5aa67848ac1ffad600f3
- TLSH T1F94128803AE902DDF2BA9E32ECBE6795497BF9515D70C68E0880824D1931F05E977B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.