General
- Target DOC-9X6B9Y.zip
- Size 586B
- Sample260804-ke5bbs1sh1
- SHA256 5bb6a1e5bbbfff7abaa55cef9ace95422b112650b96e35c0c56cbf36c7b699e3
- MD5 a4c4173aded811e793defc9367cd8bbe
- SHA1 d05751432c42644de0ed0666159dfc8942fc0759
- SHA512 62747f3899e4d345af68ccb17df0bc4766c204f52f739f26889b4e1d402afdc804323852d8c1084de7197fe20540369130878e0f53f63e15d8689a214eb20125
- TLSH T15AF096B352050DC2C08EF17B86F7B5A912847CC48493E7553234F326CE244863B49DF0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9X6B9Y.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9X6B9Y.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9X6B9Y.lnk
- Size 1KB
- SHA256 3dda5cafb1e71c0d3b47d660031f14863801d26e9d5a4b3178965d4f1003d1d6
- MD5 3b61a164a228461fc8860b9148479632
- SHA1 c369daff015a5aacd4273e359a1980788300e3a4
- SHA512 85fcb178ae63b8dea81616e645bc01337a2800a4af05ef669054545658fecaf08e2dcdedd9943424d5ffd76cd3b65cad165ef5f3e323bbd8065cbd72b5bf55ca
- TLSH T1D8319C103FEC0A14F3B38E7784BB571089BBB9A58D20C62E4150464C5022A15E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.