General
- Target DOC-7LQP6H.zip
- Size 591B
- Sample260804-kdyr6abk3t
- SHA256 d505de1008f1eb0e1ef6b98cb5bae80101c09420378ee9e872546de02fe69564
- MD5 4e21f1f24a369892af6948b45b074378
- SHA1 fd81f8a7ac6d340ea48f7d3d5eccee5802a2fb60
- SHA512 27cce27f9dd08c2d9201901de09c37768569fde5a245a2b523511999ae4c46f334ebb7482643959199900485ec554e3093f09337cc9d80a8219521e5bc5550af
- TLSH T16BF0413246741852F03EA5746AA53F2871DF8C850055BE86FAE4CA040D0928086C30D0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7LQP6H.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7LQP6H.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-7LQP6H.lnk
- Size 1KB
- SHA256 ff4d8ecfe0c9d5324440e7f28ec07c61085ea475d26d3c5908475db95af0aef5
- MD5 5bb909559a3b26717ae5c4ee857cc4a4
- SHA1 d7d2b493b815a116c5bd3abdb1e61c2e3e36cc56
- SHA512 c6e822fe53f6e8683feb5cfde96f34efbcb6383f3bea06a408fc2127b9a7fb8aba05e31eaecdc2247420e2ee9de4cb006036dc3eb27e7a1d23b900b7a214772d
- TLSH T15F3147503EED0624F3B78E7694BB572485BBB96A8D24C62E0141464C5432A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.