General
- Target DOC-9OW5YV.zip
- Size 590B
- Sample260804-kfnd7svhma
- SHA256 06e96aaff4a1e8b10c559ac81a1e01e199754d0ca9e52bead9ae19d1d5aa1047
- MD5 c3ea2e9dcabf29a5d8b49c7c9d49d946
- SHA1 b448ef2264798269782b4b1e6a8f5699db175204
- SHA512 7c206219b8ac33a10828d19ade5a8977033a49f16fb1ce96d2252f577b0252b2eff7ab14b312b32aab6ff72e07f4f04145e679ddea76f752c5b232b273910daf
- TLSH T1EFF026BBC7440018CB7D50FF1931211FD6A0F66714594147556CE80C6E249713B104B8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9OW5YV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9OW5YV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9OW5YV.lnk
- Size 1KB
- SHA256 3d3d916f6e0602c767affbd461a42ed1ee56cb9343c39ac7860ab833296e7bcb
- MD5 e4d2bbb5784c1aee0a354cd76a24967f
- SHA1 2154b0b1693b1f3eae7853ac9a8b0c1a37232096
- SHA512 24f66451f1a89f698a2fecc35df9c126e1f304d7c4740a4fc354cfaff6787a4bedcea0063ad68007d4ddbd124b3581c79391099ae655f7fae623df1f39f4bb60
- TLSH T1C53197402FED0624F3F38E7788BB572489BAB9958D20CA2E0081460C5432B15E23BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.