General
- Target DOC-A1MCLB.zip
- Size 861B
- Sample260804-kgavha1tey
- SHA256 a8cedc253f5c68b6169cdea9c755c58d2f746bc9ce0cce6964273307e4277cb5
- MD5 b86fe2aa4a945cff6f34b74ff734dc93
- SHA1 62ada297a036fec0efe22760fca16c0db6849292
- SHA512 3466e445cefdfb65c633b2b3284a671b66c4dbbd4d42d59c0ff8faf25663c18cb4b67c838ef32dac4b2c7b5ae3dd9e9faaaba608c94aac583f6c1ae0e616c85c
- TLSH T105119693DFB3DC80C60754F784353341C3E8E198507151EA9126E01E4A5F262D9B7504
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-A1MCLB.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-A1MCLB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-A1MCLB.lnk
- Size 2KB
- SHA256 3ff1460c9baa26b081f8f7aca8f643e7604f5780e28ad5abcd3b61751f48590c
- MD5 076b47faab2e8ef8cf9c6513ba859e0f
- SHA1 8a2c28bc327b8eca5c8c2e7e0fdbd39f6d1247ef
- SHA512 d5b68512aba8333a38e74661e806a0ce1fa8c52b8f040e2b5c38769f1680e7db662915a925fcf6344649df6ddeb808826acd5103ec9953bae8f7f6c93713e208
- TLSH T106419A942BEC0198F3BB9F76EDFA37608877BD569E20C58E0880810D1832B01D977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.