General
- Target DOC-OXA3E5.zip
- Size 588B
- Sample260804-kfmsnsvhlh
- SHA256 488489856a8c5912d5ce0f28c70f8c6c8aeb2a1faa8f1f8d0fc64b00680c3d18
- MD5 61b7825c02143616cb644f420adb5146
- SHA1 a048b8c6bd6251405b9b7f1c76d73c2f6390f2ed
- SHA512 66290a14672eca35d9fb389d859e94443b89881e207282c31d57ea37798f20bb6fbca53dfce378ba862380069d47c27fc4f24eff22c406d884ca60fad81e5f24
- TLSH T1AFF041E3B3241231E33083F56960BDB5474442060B3F25749228D455B4382D2D7A8149
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OXA3E5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OXA3E5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-OXA3E5.lnk
- Size 1KB
- SHA256 26191b79371f7902af94ca00445a26ac8c3ba22aafbada1dd2110d8208cffd69
- MD5 e242fe59a9bdef273a0899e6b1bb4b87
- SHA1 c1c66138ce2a055d3d2fbee1332183924f838c3d
- SHA512 85ed8e8b03863717a60b43825285553553be65e8fdb573074a6c02bf21374094936da48d82eeccd63fa73af698c481e0797991ea3e75c4a58b44129ef9b471cc
- TLSH T1B5314C503EED0614F3B38EB798BB571485BBB8568D20C61D4181454C5432A15E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.