General
- Target DOC-G4TVL6.zip
- Size 979B
- Sample260804-kf1drs1tcx
- SHA256 a85cc5d688b6039d5d5b899077830efe1178d9f956ee63e1f76c826512d7ca57
- MD5 e6a12a26290d8bdb543714deac35606f
- SHA1 3ca9f8f0f1e9f17483c82a0bf6316cfef163c5b2
- SHA512 39b8fa2623bb6c4009f5ac408f32d790909beddbde971360334d1b03564c88e0632b2d46d0a30daa7ef3b7683a7e70de9520e2bcfa313a2e60cac958d723e15a
- TLSH T19C11989485C4730DD6C3B735E80B8DDE4230EC304506251A2098796238A56883B09748
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G4TVL6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-G4TVL6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-G4TVL6.lnk
- Size 2KB
- SHA256 eff52cf00478809529c8491962a19037b12ea5f1a95a6571e05edd12dd6d94da
- MD5 d1f92b31d1cab72587e818ff1c242ee9
- SHA1 1bc8f05f3beb516b6ab7e74786fd5dadd8aa095f
- SHA512 7fb24868b6270b1c8d5437ac35e260f0738cc84aca9836649d72f2eb78e0e43420b7064239060e90a93f7bb34fd47b60b8f5504104c00e3a20ec316335044633
- TLSH T1C45146813AE90198F2FB4E32ECFA3B51497BF9525E70C61E0851860D0832F00E973B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.