General
- Target DOC-NS19W0.zip
- Size 849B
- Sample260804-kenzca1se1
- SHA256 e72efe77d1f1c3a42a4731b5c1f60c0a0dadd0e343d058d440bfcec68f45b757
- MD5 fd845144abe61c232a1a2a0a0d8d02c3
- SHA1 b23a7e2752b49fbce33a4ecf01f05fa39d0143e5
- SHA512 b13db3120bfda90e0138217fdc3b8171283cf093be70d5250d3e7781d4b24a1a771563c4ca6d3f400759f5e27980b7f9f8ed997d0cd77eb2de09d3082163c84c
- TLSH T13A01868BFF358A36FD6A0975402B1C5A4E4B3D11116BA26F7E48C11ACE0CCA19A8B596
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NS19W0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NS19W0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-NS19W0.lnk
- Size 2KB
- SHA256 31f33b86f579befd2e5b796f76208d2dc6b91eff5369cec8ec518553e0757100
- MD5 48a329ef9c693288cd3a2f5bbf0d4b29
- SHA1 d158d70c9911b71d4255fe30540bbdc5eeba2de5
- SHA512 9cb140323a3c3c37f1cf39e41fe32bad9c6f56b1c01ecce44ed203540966290f6575f2e8d499807aecea32e90b1c706bf82f13b378fd51c2dab33f4a188b1f94
- TLSH T15941A9803BEE01C9F2BB8E72DEFAA75044BFB9525E21D65D0550814D4422B09E933B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.