General
- Target DOC-1A211S.zip
- Size 952B
- Sample260804-ke2kfa1sg1
- SHA256 6fcd901bf6bc95994d421a0fea19802f65273d45100592d0914c8702871d5191
- MD5 2e26c951ab0cafc4491e4da5e2dd7ad0
- SHA1 0aa4b757d2baf6c01b3b04d27174c584aa76fd2d
- SHA512 b4ee3bea8248a28cd752dd4ae4c03632190bfc65cf4ef7c1ac51dd1f278179b952cca451464c723fcf4cfdb0d162bf412a462262d6512a34895d54773352a76f
- TLSH T1B81188F7E5D78B00E035D0BF6C093C8341AB41A14FDE85EFF98C95557D014C85629761
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1A211S.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-1A211S.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-1A211S.lnk
- Size 2KB
- SHA256 9bf195692bc3af4a7eef619ac8374c71ac896e0571604231b69494861c6cfb3b
- MD5 5eb7cee102612daee2f7e57807d9c6e9
- SHA1 bd93dc534e0dad43383974f8c9574b68a9400632
- SHA512 87de65a255602b6fd2b6658a7893ab10005c357e54cfe5c08fb492be2bbe4edaf0176f6429d8b04b5042d67de4e64e802e3ac622254510b033fd0f853fef17c8
- TLSH T1835133902BFD04A4F3FA9F76EDBE2710497B7C552D20CA9D0850820D4421B10E977B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.