General
- Target DOC-V9RH66.zip
- Size 589B
- Sample260804-kf6ksabk9v
- SHA256 cf4e8d6f3bca91b0490ae28938cb8d67c2eef5ef8dffb1870e5d68c9f375565e
- MD5 d5efc4632a4bcb2e07ea549ee82f997e
- SHA1 fc67b9e79b1cad2a592ecef4867754cdd353a221
- SHA512 7733aba7f67fd190081c05f005ab41c11c05ef70f7fe1f5c106f18ecda664a5531ba21e0718f072be6c2f1d6f738268460908f182775ecf229f5a1da61f2330e
- TLSH T1E9F0E17382547895CF164E7539DF79135CC3D0D4110D1D83606CD9BACEF619D7284660
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-V9RH66.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-V9RH66.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-V9RH66.lnk
- Size 1KB
- SHA256 6e6b976493bf69094b3869a790d55bc6866f4c2f3c17ade7e212912bc1764135
- MD5 0011e63b2366c19ab8e2efc6979a1cf2
- SHA1 8725b455c8f02c2fb67706e6217339083e8e9743
- SHA512 27461e1ffe9562ef26a419732615ca43eb268e3ac883d1b595bd97575e5cf7cf3664248cd34d3f4b8ef9e75619b5d673e2808cc5a38e84a64dff1ab2cc15f808
- TLSH T1A73192002FFC0624F3B79E778ABB572489BAB85A8E21CA2E0140454C1032A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.