General
- Target DOC-59AN4S.zip
- Size 593B
- Sample260804-kf7sva1tdw
- SHA256 59a6c52562c43ed3799f8ed8c7adf66484f5776ad8c3caf2fed57d63888efd7e
- MD5 cf46b8163276b046782f01545fe18bb0
- SHA1 769b95a1f607e97cf6070cd89c8ee67d4a2fc118
- SHA512 ec7635816869fcee0adb3777f18da14fceb7f18cc302ccc077b0a114025f97ad1ffaee616c885ec0bbe784f9b6a6e49250c20721767a9eb5ebffc6358e9b20b4
- TLSH T1BEF047C94F818029D1CB637154437A354875484BC4EC1FD57A7B8B9946591EC2D0C290
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-59AN4S.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-59AN4S.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-59AN4S.lnk
- Size 1KB
- SHA256 09315e4a032e637e8ae8719752a80facb7b21a042dffe3d6022e8b3f61397899
- MD5 186d42b2b8d7136dd9dd0e01561bcb08
- SHA1 0a20237a8c43f3b98a23689eb4e74f1d360eb796
- SHA512 b64e468161c2f9de57ec605a343ed7ecd9db3486e2f20d6f8dad63018bdf1b34e22aaf61921351ad74aa0b326c2672e4f50da3cf07dbd39adb793e20be59c935
- TLSH T1233197402FFC0624F3F38E7394BB572089BAB8558D20CA2D0040464C5072A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.