General
- Target DOC-N8YGUE.zip
- Size 590B
- Sample260804-kftafs1tby
- SHA256 b60d7299788c9492cae68e7484b859b4c33d0f0250d063ef0b14ee51be3b97a0
- MD5 4278df81e50e2932e62289f8151a4446
- SHA1 cbf1cd7464851b78b25ae960b2bc594f6728a7fd
- SHA512 78d90c6ac10f484b2fc73a12e6796f2e78090198f38cfe46642fcbdb030282ddb53f67e44e061c31fc20fd5a5b2b5969a01155ba967f3e2eb69f558926cae06f
- TLSH T16FF0267AF7830542E7CBF3B63479296211B1760A18472F871798FD735B1855D1B02933
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-N8YGUE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-N8YGUE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-N8YGUE.lnk
- Size 1KB
- SHA256 d511f5445bcf067c49912cad14a24c87f890f15bc5bb97fd721e2276d048f364
- MD5 e7a97a4f19e0d0525a45cc6aca5e6284
- SHA1 741a05453ddebe0cfd68267ae7ca00e40bb4edca
- SHA512 dfc335ef5fa682b19b22c2b1a6eed97f19df007db147f7c3f0f784ff8c4089ed38cff00bdb4681fd3c94449454ca2b3840b9f965bd093a8ffc0c5c95c55237c5
- TLSH T1DC3197002EFC0628F3B78F7684BB572485BBB8968D20CA2E0041494C1022A19E13BFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.