General
- Target DOC-DFPT7R.zip
- Size 961B
- Sample260804-kgcdbsvhpa
- SHA256 04976530cee6a8b051911bc7a54889717efdd413929c75b8d743b3410c7592c8
- MD5 8f2548e7d716859b53da2addb91e1909
- SHA1 431d639629f38e68b262acebfb0005fb6c6ecb86
- SHA512 92ad5639ded98f8961107f66c4b1e9b18d04caf0f812c8f554f8a9a8f8bc1b1180025420f11b9d7ad5817d9665138dd076ad4e89c6f0a832759e80283b826516
- TLSH T18A11C8B08650090FFBD2DD3FA0011AC971279918DC15F385D6B18E2624522EB65D0D5C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DFPT7R.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DFPT7R.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DFPT7R.lnk
- Size 2KB
- SHA256 d8c9327b9dc30d5461a0b3c3b5c624ea09c6c59170d13527a450eb8278a5aa7e
- MD5 67e1f7221ba7d3d968485a33f9a5fdcc
- SHA1 1baf81db880d7a65fdeeb61810708cc32aa0402b
- SHA512 b584a4833ebec80f9a85efb7cdf27e0d2acb6db2a72606c34f32b4c7080203ff3de65117e8d75f3b38e2b5e98396cb4a3270cebd7addedceb3924a9d50f464b7
- TLSH T1384138602BED0198F2BA9F36EDBE775188BBBD615D31C99D0840814E4422B08D973B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.