General
- Target DOC-E6GS8I.zip
- Size 586B
- Sample260804-kf2a3a1tc1
- SHA256 f1900b9ed8b7125e2fef225536194f2182c34b39ee5fd756e7b6c483f71ede58
- MD5 42d5065335d15fe2ecb75db35eba26cc
- SHA1 1461774e4e639240300fe34d3abaec9ccba6622e
- SHA512 e3dda6e762f8cc5728de1dfc3e07db31437a2e34c9b558d1a10ef46178acdcd0958f323aee2ce472e1c6df6f55ffbc1f42ab916c539ce2b5308986bbb72f4f6c
- TLSH T1B2F0263711972ACDC28F40FE14A612340454AD4E947BB6E66FE3A34DC5B009545C25D7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-E6GS8I.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-E6GS8I.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-E6GS8I.lnk
- Size 1KB
- SHA256 506b5ccf8f40f6cdcd229d1d32510e2fd0e338a6c41edf61437a9c22940cccc6
- MD5 9976d38b76399485ada3a6796bc6d945
- SHA1 c78b0688da86ec03a27872feeb37625da5d30577
- SHA512 c97153e1c30bce105a7b0472062f7f68a5b48e835c183980654f27eac20b57a0367c01a0035103ef15db1d38853384de74e2f300ba791f4b5447c86efa1ded96
- TLSH T1373147503FFD0664F3F78E7794BB972485BBB95A8E21CA2E0141454C5032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.