General
- Target DOC-8M9200.zip
- Size 588B
- Sample260804-kearqabk4y
- SHA256 48fccd5e2e64c50a720f34e9bcb42c2af19b2cdff230e6bc6ba72fd9b593a7ea
- MD5 f6b8716a77b48ccaedcce9fc0f943539
- SHA1 450c973092189ffe72f02868b39533effce38bad
- SHA512 ce46f9172191d816e8e1c92601aca166fa177fadb7ab82089d8963be0c4c5c89e7ccf60afd5cb6749c035a7e1b8723dc3808c6786ecbe4f765f2365eece3ce7b
- TLSH T1E4F041FBC12CC4CEEF97943068EF3F992A08814B51AF29012BB0D14617068ADA889D37
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8M9200.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-8M9200.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8M9200.lnk
- Size 1KB
- SHA256 374b6478d77632edaf45a68c7670ce496c528b8ba50e7078c8aea2df13468641
- MD5 cddcc7f73689402e088b8c1acce9dd2a
- SHA1 19c4f791d0f59b0e1bbc155afedec28e8d50a620
- SHA512 b76794193224aef9222da31d011e2a578d3d7a707b3671922b5013904296685a162194828344436570d0364c6f1394d6f43bfd541fddf62a70ea79a6478f27bf
- TLSH T15B3197003FEC0624F3F78F7785BB572485BAB8958D21C62D0140450C5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.