General
- Target DOC-OOWFDD.zip
- Size 590B
- Sample260804-kdzpfsvgnd
- SHA256 431adf79f01b2773ea2eeda1ec80c2c5139be221101527ecfc83c9c841bf50c0
- MD5 a9c338f03d9e783e4f18c85247b4b07c
- SHA1 00156b82545fd2a41e00a020c5890a5473893298
- SHA512 32c074848153ab90aac51152e92506b5d9eb3dea4d0c1e1c5cc23c5dfb1fe32ef06429dab643921c95ddde966d0bdde986ba4ba979bc05b68efa030493502482
- TLSH T1A4F0E1AD234D5038E52A9079AC2763557B86C028E235A89EC332D1474D8C2B2DEC5873
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OOWFDD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OOWFDD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-OOWFDD.lnk
- Size 1KB
- SHA256 f1501d24c8de5c76bfbfa960f7ce7fe68061150c6cfbce859b623d6cc6bf5cf1
- MD5 d6cbc5e5e4a92db4cbad6dc8cff98257
- SHA1 5bb9e519db82f3fc5412b5839211f4d108703827
- SHA512 c9ddea989648dd2229fde396f5712afd5798a602430ee3dcec9b895f50d5e06d6ab41e7539a8df30b4d2b31a2c0dce76a1ba68cba5149a21611890e403265aa3
- TLSH T1713197503FFC0624F3F39F7388BB572885BEB8658D20CA2E0040490C5432A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.