General
- Target DOC-BI2MP6.zip
- Size 595B
- Sample260804-ke339s1shw
- SHA256 c884d5502671150c06096eaa129be0f8184f5d77799017ebd8975b2ba5bc75fd
- MD5 3a4445404fe98f0c4d7407a976a64126
- SHA1 4faa2c9c16d79a01480ddf424cf550d7822e9dc2
- SHA512 e54676db4518a4477062729e6fcf522b1d8650411b21904bc70af62b304c56710690929cfb33a423563f1d06615a729f50ac2b6ed76a67144e1a77e31210866a
- TLSH T177F00C22C2032006EA0D683D66203F03839070A1CC175D2BE0BA98783A15D8B095B5C2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BI2MP6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BI2MP6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-BI2MP6.lnk
- Size 1KB
- SHA256 6de69909e071e8459445dac9727c2149eb56e5dc2fa1d1f671a86156ecef1e12
- MD5 f6372da7cf71574933fd7e7d5b247a7a
- SHA1 28f26586f38558ce8498ce181c432720e40c927c
- SHA512 0679717949c012bc8f328031ac93224c7bc1ce7e802f1b8fb80973a7ed1672e6583115715c9379f6b116a8394869dfe3f1352a5b51d2854cab2892ea82e67740
- TLSH T1A73197003EEC0A64F3B78E7389BB572489BAB89A8D20CA2E0141464D5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.