General
- Target DOC-U8YFN6.zip
- Size 854B
- Sample260804-kez2ls1sgy
- SHA256 9eec69e779f82f15158cb109af1c1024f2fe5ca6f3e0c5084d1c3fe2bb8f7e75
- MD5 ba28436c88e0b1a3a008870d9c28670a
- SHA1 c27babbb8cd045fbf79a99a711ec2f8f36b363d9
- SHA512 d37048ecd18851176cdb0a8656ee94c6ff0f9a893814de90ec96bb2e40f82f280897ce6870894a3f664b2db6a37e382c53d63c16cf1a6e592aa805d28877de35
- TLSH T1EE01D6BA5CA62998E70BBD7C857F78C1C6AB7020221C371F6A70C4020D860622BCA077
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-U8YFN6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-U8YFN6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-U8YFN6.lnk
- Size 2KB
- SHA256 d2ef0674eafdaff7d5b96ed06450ad72227d0d46d1f826fe3edf8d504258ccaa
- MD5 76e390bc9b254d1d7755ad67e8b11196
- SHA1 598422e3772a580459e15aad09a184a8fb1316e4
- SHA512 0571b5dfa21ef9fcc66ca109179cb1c77b46413a0b7cbb25d09e460772b3bcf6ec0abd928a0f066cac0c5b1b244f151676c9e01272fe3e32e054d2e37538a280
- TLSH T1204127447BDD01D8F2BF8D7AECFA670188BBB8618D60C64E0850810E5422F05E9B7B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.