General
- Target DOC-W55XVK.zip
- Size 984B
- Sample260804-kfq54avhmg
- SHA256 8db181525dd6110c2534a7a3c1937a34591dcf0f3bda035575c993d9624cc84b
- MD5 23e6f72c0d06933d56a5e582f8afc2c1
- SHA1 94bdf84dec05fcd6bf678eb49f7b9492a3b36d92
- SHA512 7cba7af42fa4b4ee4ff33c95cc42050a3f1addb6f367b23c36702254ccd622746d43d2676b979e453b5acf742dcfa40138725d9a7ed63c30864954da92cd4bca
- TLSH T1CA1194B6757D8D85FB2E38B54D3CAE4780AE62872419F2B27D12730F1B990490BE0B5D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-W55XVK.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-W55XVK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-W55XVK.lnk
- Size 2KB
- SHA256 40a4ea2bc5cae8a825d0572ac1bf6c960c30f4c84bd0650f8b211a4ffb92cbac
- MD5 7bfe89523a7e6b6c8c7f07ba4fba1607
- SHA1 dd9c94fb5eca19acbd0ce12f40e111b2c1487070
- SHA512 57219897339f9f28aefd6303f473ecebd02dc2c23ac0ce2c26ff3c18b13c95acad9e8f2669413bbd97304213978802adb8d98280ad495ae1c2944a208598542a
- TLSH T1285157902AF801D8F2FF8E72DEFE2B91497BB9916C60C59D1C41814C0822B41E473B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.