General
- Target DOC-M6O3CN.zip
- Size 932B
- Sample260804-kek8fsgb56
- SHA256 0c60d05cb6955d6e434881bf41d8d82dd659f51508fc372e7d9714d628de0917
- MD5 bf9d6fbbfebe30d119752b41394d12ad
- SHA1 8c50bff31357b26817f745eeb3f393eba76e0c3c
- SHA512 14e68923cc544192cde971cc1362aa61af8b49aba44afc44a52eab168bad4d4db47b63c8ee70330f97a46eb025c79d998727070b70d2621fa4df81673600c8a6
- TLSH T18711B7A34D030371DCA2C0773C98F94BC15830997A0BFEA1B0ACC2323B248AE9743816
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M6O3CN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M6O3CN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-M6O3CN.lnk
- Size 2KB
- SHA256 b1bd92d871948bfc0b1bddeafdec38f053f3c4ea36f91e4ce480b4960c784bba
- MD5 ec1d4f18fe7e70ff79c890e26f9b1fe3
- SHA1 6c9b6ee844b5baeb98d2460cc752078209c8b3e4
- SHA512 5189f884bbbeef33e58dbaa4dff7866a704036fc96c97c86d38114270f7d164a9d32817c0cc820a3c2595be721095460e358bf4dde585ea494e85ff6ab885896
- TLSH T1BD4136802AFD40E4F2BE8E32EEFE275189BBBA655D71C55D0C80814D1C22B41D577B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.