General
- Target DOC-UY13FR.zip
- Size 590B
- Sample260804-kgcdbsvhnh
- SHA256 dcd21225e3f0b4c8ffb5df95fe74df51ebce551367d3f7197fdd2268b32cd9d2
- MD5 ee650ad7ccd60fffc9c0d4a341afa50f
- SHA1 827d6f2928d91e2b46c6a176fea7bcbeaa9394bd
- SHA512 8fdab51bdd8af83a0b41595a04f49cd352362c76980d2fd774f7fea1744b7389cc49ecabb04197995495a95aed9c4ef4f09489db46e605293150d6167df7b7fa
- TLSH T105F00CF32CDC820ACE2240F5321F3927464C82E38720936EB928B496096C2319A58630
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UY13FR.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-UY13FR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-UY13FR.lnk
- Size 1KB
- SHA256 dc62b07528db93536acc7c281a25c8dfa230f7437f156c41085e2424484e8d5a
- MD5 da262fb1769a8ac3c3efa25e50b704ea
- SHA1 011426eb55ccde7f0e49d38f9f6ea19da9c77bba
- SHA512 878288d9abe91fe363356a1acf811ad0ac0d248691e6d65f882484169c866c77e53b0f559a0d421b3f15e4a0ce303725c9c209002096d2a3307c0fb0da8790a1
- TLSH T1823197002FFC0624F3F38F7394BB572089BABC698E20CA2E0041450C1432A15E57AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.