General
- Target DOC-M84WZF.zip
- Size 590B
- Sample260804-ke65xsvgrf
- SHA256 b40a8e9eb99c802937f0593f7ea5cc5b154a53140af9ad2a9d1f9b34a9f6d9ae
- MD5 155d24f9aab096cd21ad29fa2b0b4a5c
- SHA1 039e88ab95bd1f4d2828909ee68813ba3c03c910
- SHA512 d70817dca4b9f7e0d35ef13b3988eda408bd4d8d435501fe11e2978bb9dcb2485c398b3c54d54b1077d9a0fdd4adf603415f18c28a742f77eca485bb4895c740
- TLSH T1E3F00C48C01C8B1CF7A282B03C393A74728CAEE891E665982598AC030A128C63189980
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M84WZF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M84WZF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-M84WZF.lnk
- Size 1KB
- SHA256 3ccd4a3ca9838eba583a77c938f7316ddfc2ee3337f11e8f9ce7de1a93bb4dd1
- MD5 0a9c9ced8cd852c9fc071b73b10c31c1
- SHA1 fa9a21e0e821989a3d617f267caaef64692a913f
- SHA512 2ed3898af264231a0b451713d0236fb344c50012641a918e17585cfd7cd5470b8a53aa245569dd816fe22119ccafe52bcce856489eb1d6c8e1a0610c16d86514
- TLSH T18831CB003FEC0628F3F38F7784BB672489BBB85A8E20C72E0041450C1072A15E53AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.