General
- Target DOC-S1A2BS.zip
- Size 923B
- Sample260804-kfx9ea1tcv
- SHA256 9373149c0ec4ec463ee24c964efd7c9592b094f7a71aac8a130792cadbefa94c
- MD5 6478d7c9b6c2f10ee851b79171a40a71
- SHA1 44b7b6a8c9df6f3033fed59d3dc0ddb6e1391c8f
- SHA512 948c2404642adda2ee0c53a56cfe6fda7d94c7912e77937a80e4707bb6d55199af554debafdad188360ff7ca05ee2beb17b08179dbe7e0e4b830a7668c2e31e8
- TLSH T1C111F73F99804783E837C6F8DC13F9414B859CF20150F88CC1F445717AB1655DA82721
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-S1A2BS.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-S1A2BS.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-S1A2BS.lnk
- Size 2KB
- SHA256 54838119a3e0fb4bea65ca42b2857ff321010d0c60ebaaac99e86a0b7a9e905c
- MD5 2bc1b980d23957ee9608d2a022cc848c
- SHA1 db66f7c8ff9a9a69dd040878c69ff5ac6f6720a2
- SHA512 fd2ee0b7dd76ee3189080ab975aa0acfce2b0bb618d8621f06113b307d77d1c00e0e754aa7be6b920d9d7a265072939cc91e7168e0c3b3b321bc331f095a53f9
- TLSH T1014146403EDD01E8F2BB5E72EDBE1B9049BFF8626D31C64E0850818D5922705E577F26
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.