General
- Target DOC-O07LW4.zip
- Size 894B
- Sample260804-kffz5agb64
- SHA256 c569cc6be265655619458da5963de5f1e449d86c787594de133b212dfa2caebd
- MD5 5bec537ec9b9aee1eb0dd8d88d59aba9
- SHA1 efd0389d0ab0ce2a234aa0f73feb22f4d793af9c
- SHA512 1d5b335645805a92922e1b56365f8e4cc874f16d08549e3e88f75c7c290dc3e878d0c100a2ef1d5b9736a4e3b8dbf7358051ca3193ead5e2155ad1e42b96167b
- TLSH T14811E6F830130B3EF86302F59950373DC82C49DAA98B99623877C840EEC2488AB50230
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-O07LW4.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-O07LW4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-O07LW4.lnk
- Size 2KB
- SHA256 ab86b138a43fbf10437e716a6997dfb4e31cf6cc52ccf023cfda818b24c2f714
- MD5 f995337c3568ca9bf96202da5bd6838a
- SHA1 e02964bea24a20e2b646da6e440987856f22de68
- SHA512 4abe8f2f9453f3fa97ac778a629a5764d7250ec992c74e3e8343e60f4df412337fa117016794c2007e18cf53ee7de0a4b281854f677a6d7543671a1ff3f31598
- TLSH T18E4166802AEE05D4F2BB8E32ACFE27508ABBB9619D60C28D0540820D0422F51E977F77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.