General
- Target DOC-D428D5.zip
- Size 586B
- Sample260804-kejdvs1sev
- SHA256 3332afd44d6e8860e6aaf449aec7ecd167390bb5778713bea7daa39ced83e78c
- MD5 df432d2dfa6e26103ab4be551ab5d0a5
- SHA1 57f90827c5dfc2cc8f8d7cd13a6675ced506c79a
- SHA512 f015d582cc9ddbb013b3a874af964071896aab13984d8e9de4c6db5759b341054a60ff8de9bc0857d43e1559332c957915aecc298f234abd7079278b76d210c0
- TLSH T1CCF096E03BA2C0C0F8C20EF5C0D12C0A4900C81F43CB2BA53569388482111D1897B3BC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-D428D5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-D428D5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-D428D5.lnk
- Size 1KB
- SHA256 162a5ab29ef9b166c02f41823c70d59af43e3b30f5b872b974e91dc8cfb52f3b
- MD5 96654c50d8f6b99610eb2012aab6d96d
- SHA1 ae86db721eefc53e0836221d545226b258fa37eb
- SHA512 d28046e2a1ad7f00ed9383bc1064a75aeccf6691072307d6b5386d79ed2fa6bf1e992d91c64831f32d18d8aba6052fc759e7dcf2cb75fc18ce95863b9ec97275
- TLSH T1743197402FFD0624F3B38E7B84BB572085BBB8A58E20C72E0042460C1423A15E17BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.