General
- Target DOC-IB8X9V.zip
- Size 594B
- Sample260804-kfg77avhkh
- SHA256 cfd0716a6ee3f20e5e3f4e560d6917569eeb65d62ac045491f922aabba0d3782
- MD5 b98a5bce2bcdfa89fd3376a2bb44ccf8
- SHA1 5d72ad051a8ba2ed3ca56a59ca4445eea6be2d3b
- SHA512 5ec342442a89cd1d49f8d2bc326235985a027618c16c53f4ed9ca2cd118fddbfa194e6c252c13da52f360a0a243a069560a577080202cdeacb8845fbec7f0738
- TLSH T1BCF096BA8E5502F6F117FC3E03B30231785080AA410F0765008CDEFE2C381C34864D2E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IB8X9V.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IB8X9V.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-IB8X9V.lnk
- Size 1KB
- SHA256 73eae67b0b3ba8e933f2effdf4b0ce0428a2887a4d28ae33f2c6512b2caa5289
- MD5 fce2b60bfebb45c32f37217ec779022e
- SHA1 abc30a873a8dab887460cd58fcd012558b8c5a8e
- SHA512 79d3b386c133d8c6b57bd43b4cc5865d56c02406443817395195bdefd609638ff8d5da5e5da603d9de73aeb347708501d32583527c80d1384052d09cfd2956f3
- TLSH T1E53197403EED0624F3B38F7784BB5B2095BFB9D98E20CA2D0040450C5032A15E1BAF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.