General
- Target DOC-19I76C.zip
- Size 958B
- Sample260804-kftk8a1tbz
- SHA256 e16f95bae420ed1638e7dfa96e620fe409afd71cb4327dcaed46961e0e7e368c
- MD5 5a0677b0b67a295338d0d7667413b640
- SHA1 8bec9a200d4808963e43311eda5f868768cbd9b9
- SHA512 ffc06f11b846a2a724b2d1246c715322668d0efbebbbe396ba74de98a461d8a92b7ed8c885a2bcdfa6a5b4dcd6e43d0537243ae0bf0da00707402346708ddcb2
- TLSH T1131184CE6D98141DE01BC169F053BBC34818C8818FAA5D8BB36A73322D0D5261A7AB1A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-19I76C.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-19I76C.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-19I76C.lnk
- Size 2KB
- SHA256 599363116ad48f7c1641b6e5a044279663c993232b7d6cd46a99fc1777548ef8
- MD5 9c148e70e561284af9cd400f01b3db5d
- SHA1 a1d638c4a8978acd1434cb8744f3d47904249009
- SHA512 4b1e11849a789280b3fea7232864a78b551f2ff1c7cc0a570256e439d260a602c68a5a2ff169ecb3b79c8b83f3c41018115be9df5ec3fefc9631ed9a00119966
- TLSH T1795123802AE94198F2FB9F72EEFE67C5497BB9A26DB0D54D0C41820C4822701C477B62
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.