General
- Target DOC-5SU6R5.zip
- Size 844B
- Sample260804-kfglnagb65
- SHA256 c309b7a866269557739439959f4605bc00a76fb5d7d013c94eec54a9236ee24c
- MD5 0174fc7c110c15453478b199d01d2ea5
- SHA1 d86dc1fc1a4f57b223f02b9b112eac82d1af131c
- SHA512 5d3719b2855ba5b7425b09ada9544a8aa599b8c5527e90a1e225d6b4b2767b28e96908b9a6b3a55cacb310fc4467793e418c6e5381eec2853ebdaa9ef03b87d2
- TLSH T12B0186030E50100DD099C8B1CC58FEFA86E77100940D6DA044C3DE5A5CE723607C9261
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5SU6R5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-5SU6R5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-5SU6R5.lnk
- Size 2KB
- SHA256 08f81c433ecf14616e5bea012d623361d592968144304a6d0f609b93ed38411d
- MD5 9d88237990c712dbb02bf3763d04703b
- SHA1 439a17709dbcc22a633d6b26be2e06521315f3ce
- SHA512 05498fbd359ff70ab25b7b2ba33d9f52516c47d9e97bc604dd1c8eddd7c5f3b005a1830b3c3652cbf77aa7fe1bedbbdf5b203669c3f7f44a85238be4f12086a0
- TLSH T14B41664466FC01D8F2BB8E72E9FA23148C7BB8615D70C58E0850810E1412F05EA37B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.