General
- Target DOC-54TNGO.zip
- Size 586B
- Sample260804-ke7fpavgrh
- SHA256 930b77fd1a0b309c398044a907c5c6250bad15acf8264e4866ded291b5685f4e
- MD5 d294d05ba18a499e8f2bdb545eaf72a4
- SHA1 ca6f6ab79600e45ffad69bd0e51f84f4253b3965
- SHA512 9dbe0fc158533377d666783b341fa13c506b83e3e5847e079cc42dc54db3442b5f04ea42b39057268aab9960dc16b2a41ac67cc082a2c7988b57f3074502f98b
- TLSH T152F0E16BD3A2C929C8E353B6C6E4232E94634C090E23590A6D6BF252891955E42BE438
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-54TNGO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-54TNGO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-54TNGO.lnk
- Size 1KB
- SHA256 f4f36f2a69e6fbf646d121178d642f092f37f08fa4bc03ec99a1171e9ab1d240
- MD5 268e48e95aba7f1967096aac5e2c5a85
- SHA1 574d81a4927d7ccde9a655428778b520e776fecb
- SHA512 1c50af22518596165d4f82329055cf314e831c2457fc7b1d7797dc3c0fb80e92f91407a35f1d9aea2476c098ddbc0effc2a0c2850e9ab97be0d26bb10c74630a
- TLSH T1853164002FEC0A24F3F38F7294BB572489BAB8558D20C62E0080460C5422B15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.