General
- Target DOC-CG5PA9.zip
- Size 909B
- Sample260804-kfr3dsvhnb
- SHA256 f9b988ae14f5b139713909b00ded7d9b642a309daf9bde0c0752b0adbb83292d
- MD5 6a45badc84962de26059e66569dbe691
- SHA1 678308531c7f1af34b87df0a9c13b59f0b913bd0
- SHA512 591f0d8aa7e0735cde4bb1532d485ca921d6fba71cbfd6147cf556dc2b7ee94e4377e6cd17a52af9c12be00ea17f51a39b9575f1ed7496d63499fde68183e2ed
- TLSH T1D61163D8015FD4E2D4C1723CEB92798B0A201925682BBDC7B51CD5C069B92982EEEF33
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CG5PA9.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-CG5PA9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-CG5PA9.lnk
- Size 2KB
- SHA256 5171c6a0cf97374ffa4e7df32de009718b015e81ad1bc6c373d91844c5c1c559
- MD5 3d840b5ecf6dbdf977baeb7ae585076b
- SHA1 bbccf0e12bdb4ab3904f6d8886a027af94d10a81
- SHA512 41b28d94167c9c9398299278cd2074609f05c9cb96120bf53480f684de1bb285a961c51addcc24954f6c2a3a7c31aa4dc7aec3514c5b53df85f48d43c37680d0
- TLSH T1F84126842AEE41D8F3BA8E72EDBE67604DBBB9515D24C58D0840820E5422F01D937B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.