General
- Target DOC-MCG66I.zip
- Size 586B
- Sample260804-kex71sbk5w
- SHA256 ba32579ad15cb4cf8b663fc7f3fcd8eee4400978495c0a13107b19a4193a4616
- MD5 47d26dd304c7ae547780f4e1a6f8ea86
- SHA1 e1e5cc2422ff0563ec68c6b41113eec24211e50e
- SHA512 7ef5cae2dae674f7a0035cd5647c9c46cbe1417d16371ec5a8ec18c445f3784ac3cb932e5ee13305150b727d93ff5e2e0be58f51090f21b94313428825540d66
- TLSH T17CF04192A740B11BC6F5A8F5B05002025A28C302528A4364EE9DBE2F26804B9279A337
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MCG66I.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-MCG66I.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-MCG66I.lnk
- Size 1KB
- SHA256 82d7212145c5100f3c78822f954045f120997629d79b59d41cf7c8912fb95af8
- MD5 840d2b25974a7589c515e212995e2a23
- SHA1 c679cf0ea0c0b147cef8b6e6d5c24182ab1ca59a
- SHA512 f1a273e4e715872f24c13ae6abc9c5ffdb93c9ecd265c3441d9c93c8e2be3f5fee10018ec1b4ca0a43f938003b294160deb2c8f2c2102dd7bbd6009a2179f05e
- TLSH T15B3197103FEE0624F3F38F7684BB572485BAB8568E24DA2E4141450C1022A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.