General
- Target DOC-Y95B7K.zip
- Size 943B
- Sample260804-kej1ds1sew
- SHA256 e8854b4e2dd25ac57d9e07f8b993183a22988fa9a7bdd9028a20464680e82ab5
- MD5 d858de2e2743cb8e35483037ad1c3b5d
- SHA1 a4e52bedd480f5dfb2992497cad1387840436e5d
- SHA512 bfce72425aaf681cf5c0fea4027c5cb97c814bcb7dac424dd71c9e3a4fe4a9306344b92727aede4fe376399f9223950089221ae0fa401e4b444a8c591310f177
- TLSH T10E1188089294C07DED10D935D692931CF3B44138EE9B464BA008533E967948F8B7A351
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y95B7K.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Y95B7K.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-Y95B7K.lnk
- Size 2KB
- SHA256 86431baec528ebcf289c394af17aa2b0efae1132d12abdd4a365169a424658c3
- MD5 840e1eb8666281510f4747deabb45ad4
- SHA1 54affc7637af830059bd68d20a8fcb0e25a5172d
- SHA512 bdcba9a58177369445109880aeb0e4ea21f29a8ec7522c76d3ac5295db0ca0b22e9f9fb8c20a166c83323984a2825a4b6beba660def75486822684d4767e1b98
- TLSH T1A94147803AE901D9F2BE8E32EDFE675485BBB9919DB1C58D0D40C24C0422B01E577B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.