General
- Target DOC-5C92AI.zip
- Size 886B
- Sample260804-ke26za1shs
- SHA256 7ce245433331e77b5b47f2a62308f7afd8c7596e55ef5f4ce1646d80e9544456
- MD5 24b5ba7dac7753dfc25c8537a9ac238f
- SHA1 542297c07cca37a1f128149485d80944a07c3b6a
- SHA512 0ec0a704fad2e70cca9a7449e7a20b93b2fa165119c848681e72717a3b2a69e052d26b414017a084a0a2fe7262526a5e21f7b7de2c4add077a99f907b310a672
- TLSH T1151196917D53D0D8E929C0F190893D1380322EE46FD62CD3A434FE4D6A2E0F1795C654
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5C92AI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-5C92AI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-5C92AI.lnk
- Size 2KB
- SHA256 9df5327967ba83fe2d1704cbe696a755aa3f47cf2f92b12a956cbf0aeb295b49
- MD5 49c986af748b4081ce55cbabb032dde5
- SHA1 b549cc4e47daf13b81be0ea9d3fd029e2b8c9319
- SHA512 38092dd1ad346292a6e2295ad51a6cbcb67c9b00b39bffea4e743afaf47bfe1e25b64729f7ebbf85aa265c74dbd05d52eb5dbf37adec2838156f4fff15ed605a
- TLSH T1884155806EEA01E4F2BB9E76DDFA6B51897BB9526D61C64D0500810C1422B05E537F22
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.