General
- Target DOC-719WRH.zip
- Size 878B
- Sample260804-ke5xvs1tas
- SHA256 eeb8fea9296fdc74f5a5084ba124cb45dcd9ed624abd3a77baff4dc33b0f037d
- MD5 46c4dc83d4cfd582165405d7570eb665
- SHA1 a0fc22c4be8550071ac5cb6e939be64a5caa5b48
- SHA512 4c1fd6e6b2756801c1004481c5d19656686c065fc9a0bdafe29af1f2e248e5023188ee651745718042027f566cdb384a3e756b132d8afc1c7c1b8f267bd81594
- TLSH T17B11DA373FD3194EED5881B074326130B94FFBB0092A8D416752FE7449C01611354777
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-719WRH.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-719WRH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-719WRH.lnk
- Size 2KB
- SHA256 22fd67ee5dc6bbfcc346c35d4d673990f530244b983d36e1d10c5ad44914618b
- MD5 2935fe41d6c1b2307f1476909af523dd
- SHA1 c9c78d43589510f6291434bf4cd87fdd8d709a5b
- SHA512 e547ad90a6a39df0b8dc282c05bddbe7fa2155add97e3e65a40b02b6711c9f2c5a889b52e11571f93894529e410be59cfd7289b2bca313c0d12511dec7c68a30
- TLSH T1314133942BEA01D8F3BF9E32ECBE274149BBB855AD71C59D0800820D5022B01ED73F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.