General
- Target DOC-B21BUP.zip
- Size 978B
- Sample260804-keh34a1ses
- SHA256 f4d4726f4bf8eea964fa4af65c64ae6635c4e3a2b158caa11f6aa6a842bb374f
- MD5 7cec10b64462967af779db2973993c58
- SHA1 4e6d1223db71aa06d261d59b0fe7e5403768959b
- SHA512 03629f7d5215fb0ba8b7bde7a28e3ecf9b7e44da37e5227de402ff61584f4e5c9fe4b45f2d4f8ff4307dd4938f89d4ffdea46816a55bf8f6a6da1c19f92ead90
- TLSH T1AF11CC739721E78CF756C43AC505288DC596C50280CDE44BADBDD98D5DBC381FC17159
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-B21BUP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-B21BUP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-B21BUP.lnk
- Size 2KB
- SHA256 91cc6d9b2788725b45df9af1337979c1f22d9f8c39858bf0c64f09be64f75883
- MD5 b5f07c8947f0aacff75ab4659440ee94
- SHA1 016a0ba403c880c0031de004a149597599818c8a
- SHA512 92f27fbcd5a9d5e06204ced56acd2247d5600d213209a484ddd9e8d62a8e2a78ed152e1aa29d324ffa2700c7543d379caec8df5aef7c59e45505fc0a3a25490e
- TLSH T13E5166903AEA00DDF2BB9E72DAFE27800A7BF5616D60C69D4D00C14D0822B05E877B12
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.