General
- Target DOC-F96PMD.zip
- Size 590B
- Sample260804-kf9mfa1tev
- SHA256 62a9934c71cfe1881cd032f98556963a3b0cc93df5d8375154708a028bc4e1c3
- MD5 90ab0bb790593800b1b6ad147d6959b6
- SHA1 d270c1b882b84e7c524ee446ea1ee49750295c37
- SHA512 e40087ae6d3d61e401e5b6cfde39d3b0ca8134363543dc210099c20dc8d2408f91907731c7a2ef2e2ae2955fdecaf779e56344df9e975e7f3fe14773223433c8
- TLSH T189F041311FE8095CC6CF62BCA25730208186889B0E0D63C525949E3A1E18EF2650E1BC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-F96PMD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-F96PMD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-F96PMD.lnk
- Size 1KB
- SHA256 40056deb7429ec18d0c943faa436eba00a01ea393d9cea8f829f59bcea405010
- MD5 b292ab54abfc65218da47ed1f77acf4f
- SHA1 c61542135470a91567d6bbb22da956ec1f5ab354
- SHA512 f60c968a7a9de56ba74d3aca6a434388f68ccff498831e4974aa0ffdb2f1d0d90c56e985c2a15a12b28ba66527f81ad6c252b6bffc8826bf2c2cd18123196eed
- TLSH T1E23197003EFD0624F3B3CE7795BB572085BBB8568D20C62D0041464C1032A15E13BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.