General
- Target DOC-8M90B0.zip
- Size 589B
- Sample260804-kgbf2avhne
- SHA256 1d8b26a5e4ecc8aab22d102c761010c136598debe50d01d1c9fc404b82240332
- MD5 52d34f1921193fc7133586291d9138b7
- SHA1 2e0fff48d3bc99c29e191170c24da0a6251c9fc0
- SHA512 5ffe966c693b5fe60a490d402207de9fbe58d932efdfe8b1e91c56ff537668c9ed0aab2556e8009e9feae1ff48017f551c050e8ca50f223e2f9177678618237d
- TLSH T160F026AF49944043C492903554B72B485744954B5DCEA8C2497CED8B50590DF5DCEFA3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8M90B0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-8M90B0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8M90B0.lnk
- Size 1KB
- SHA256 8e5f227927a80b3eea3494dc86437d17d85704570f92123fe18b24927957e059
- MD5 2bd2d7ee86314f5d0811068fea230a58
- SHA1 cf3e7c444705dc47c9d1160e8d7cc67c6fb2f37f
- SHA512 f1701a9f18c359f5fc277dd2fd139948d554d7873e0ee350e32d790af51af6c5b2c8f7955a848f55202eabf2d966e370ac87b1a19fbea04a262ee32741f70209
- TLSH T1D831CB003FEC0624F3F38F7398BB572089BBB8558D20CA2E0140460C5032A15E13BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.