General
- Target DOC-5QRG95.zip
- Size 912B
- Sample260804-kexaqa1sf1
- SHA256 acbb0bf34c91f89ae8ca2a97110cfccccfe6a3b56516c6aa4c38fb2fe60b6767
- MD5 d22d3a53aa2714204970444a834497c2
- SHA1 a9efb79de4157d7a680af5f66b165b2d08d75144
- SHA512 fbdf7fda65f4253cad9c55543086e02e24b0396819b3ec3c321d44a796e031f516bf57cc8f8d077ada909d70bbfddf9947db7e42fd065feb550918e3362a8d53
- TLSH T1EB11B7B6C7935442DEB195B19008C62E6268100742D3FBEEACDFD8551A9500E2F95111
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5QRG95.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-5QRG95.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-5QRG95.lnk
- Size 2KB
- SHA256 f35222ac3b833d8c93bf3093a3440bf50ba224d9b490ea88e7848783dfb51504
- MD5 3f234acff22ee3d1f5eb49aafe187a9d
- SHA1 df5e5949df885acc7006d1e35246fc5368de47cb
- SHA512 d1da8260e69def65d0e10a3af23e79a341e6997bd5c97fd54faf2f652adaaa7f3b686991127936ef3041036a5a7a3fb9f4000a8d823a13a067b122701d722211
- TLSH T1CA415A902EEA0098F2FB8F76EDFE6B95497BB8616C60C64D0C40814C5822744E5B7B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.