General
- Target DOC-7Z9RBG.zip
- Size 583B
- Sample260804-kg2cfs1vat
- SHA256 d0665a9166cd06cff04818b6eb933007159d2a501ba750076332b91f6dc5d139
- MD5 50a9e01e3e96dd3bc83dd15240fd5798
- SHA1 6c3031f48c0667f2fb5f7dbb9a48e72e941d1895
- SHA512 b084eb35cbd01679a56555d22bde195850ae99d69d1903414c18bacca9692f7ce21e5485a5f2a20bc63fe4c19ee2b09d62ac4aa38172cb94af67b31fbfbab3f8
- TLSH T124F0E1467B4A1B64D481F87C601B841B0658A80269A55BDE78F4E79F4E01D4B94B4C11
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7Z9RBG.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7Z9RBG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-7Z9RBG.lnk
- Size 1KB
- SHA256 cb39f7804322620d8fdb29e47b8562601204aa096ab76be28c323dadb102cbe1
- MD5 453cefd24e0ca10de92b385e83feb3c6
- SHA1 c50ad1574b6d9499ed3136ea1a1edae8e3c5db19
- SHA512 4c913f077fcdae99994e9c3ec2faba12da529c4c1fb52b05568f7f53205e11378df0b644369eab8bda2f9c4bef6e8032d472281c41b0b18862479824bf9b54c9
- TLSH T14631CB103FEC0664F3F79F7398BB572485BBB9A68D21C62E0140454C5472A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.