General
- Target DOC-4M6047.zip
- Size 588B
- Sample260804-kfhtqagb66
- SHA256 44e1127639bc678b28e07422324636360498ac488ac060376330e5d80a7c6ace
- MD5 fba54d936e4a43ac42d9d710f673583b
- SHA1 f025ca8284dce1fde3c338c8c7864d0ebcb3059f
- SHA512 f20e1acf90cd9dcdbb58f10ccfc30d48e20a31e904e2fe20daf4bbab4bca6323c4a41f7a35c3df119b053cc5a67ec6a2fddf9dc095f09b0358fa066e32aad3af
- TLSH T1E8F08BB74B8D0B72D824CEB8215A6E19318498E98D137E0FA45CD28E765C7F45FB9F10
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4M6047.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4M6047.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4M6047.lnk
- Size 1KB
- SHA256 8b4b60faac9e2ebb8b7a8ed472b281518223a90db653c00c50236997d2e0b5ce
- MD5 90e88833e4531dfbd6c2c96ff056d3eb
- SHA1 08ddd14cd1e266744ec7787814008a2dfe1f12fc
- SHA512 b4e870273f50dfea7366db4f231aa9f58082c856c45c9071f45bc77235be977f77df3052010b1097466ae7fabd362791ba17feca8b633b4135507e16d558132a
- TLSH T1FA3147503EED0624F3B38EB695BB572489BBB8AA8D20CA2D0181494D5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.