General
- Target DOC-M47594.zip
- Size 956B
- Sample260804-ke1m5sbk51
- SHA256 a5b22ff0d1ea4fad27a932763cf960884b67ed3d649b2e7a883b07bd17093444
- MD5 42352c078a64d0e805ff52b3edb14d75
- SHA1 fc79b9e01573a36a5a773373fbd878f6fc6c916c
- SHA512 036d62c31dcf04262721d6bad27832ab0dc04572eacc4536984dfcd959f2552f570d18b3cd83e30d098d03a9172cd6fc70989febf7466500490255e21213b905
- TLSH T1F91188D27FC61C5CF687D1774C63AD80D9B74A98D041C696053DD4B4042A9973F889DA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M47594.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M47594.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-M47594.lnk
- Size 2KB
- SHA256 fc20c65aef98826fffaeb0d4d84bad34bae02517a40589a568d7070007541f14
- MD5 bfadc0464e722212f449440df666805c
- SHA1 fdaac82686d24808310ecaac29b6f5d88e27f00e
- SHA512 09a0be90499f08f4c53451be8beb60c0f72c8e296a927843fc7f577fbbcc434584e190483dbfc7a85d0ea7d073376ce3b7cf956cb0be3389c0a89f06aa8c3623
- TLSH T1F35100803BEA0198F2FF9E76DDFA67504C7FB8215DA0D59D0C50814D2422F41E937B66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.