General
- Target DOC-MQ82NW.zip
- Size 926B
- Sample260804-ke4d2a1shx
- SHA256 97ed1ce8209df2511482d79c100b23f7b21014235fd659963e67820fd0226501
- MD5 0d8a7b3d2bbf9106ea02ea54efc3ba67
- SHA1 92951eeaf00f5a5b373393563389aa9679544abe
- SHA512 37bce5d4fce92c419a924e8491aae7d3ac116d96ee6e48317f0dcb09cedc822ee6e54a351dbb09eb31db9bd061232bcd20fcf54eb101102a260f1f6357162e69
- TLSH T12411442066CF15E0D895CCF926D9616A02754C1C406D9BA2177DE8242B620C80661ABF
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MQ82NW.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-MQ82NW.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-MQ82NW.lnk
- Size 2KB
- SHA256 3cd5015f859ffacf4da709955dfe16b80f2fe4930eeda197fcd48f0f76b705c0
- MD5 2ad8c204512ad5997ea5be6ce88a1b05
- SHA1 52b1a12dab67b6de172af475fb2c459606e83edd
- SHA512 4f6037c75484a4b57ec7fb9c7d522710dd8583c474754d3381c2eae06765b914635d11286418b8e86bbcf3410b52d875995dc605145d0e25cc2aa260e1405d76
- TLSH T1F04187902AFD059CF3BF9E72EEFE6341897BF9526D61C64D0880814C4822B04E977B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.