General
- Target DOC-HH0WZ4.zip
- Size 593B
- Sample260804-kgdldsvhpf
- SHA256 147c11026e11a703fd0568a51044d11e4a5e939bac8d716164f704f9e2afd7b7
- MD5 be1fc380c636aec7e2144175bbc14fa8
- SHA1 762c945f096fec0566914cd5537938d20917f7db
- SHA512 e3712c187e7d823ea699869bd9892eb05be069c1c42fb15b0429e1cb00a005900c76bf7e40cc19f1333dc12650d0da8d7631819bd7c54930d9c42fce68425cd0
- TLSH T122F09676C624F002D8EBF8B479FE34465844B5C5862F0AB7010FC47A8C3400D4A7106C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HH0WZ4.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HH0WZ4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-HH0WZ4.lnk
- Size 1KB
- SHA256 7919baab6586862aa72f1f5703551b217ae98b91e0827a2b470186cab4c27502
- MD5 9e5c838b8f722772b501000b014c75ae
- SHA1 ad3cadff9409f210e4eb47b16142d811bb0bdb55
- SHA512 b7243f2f8078119b8a8fbba1bbe558fff6e1753584934df4149bad03a8ebeb689a5944b2d50f10dad3237b7f3d8ee1320e33363aecb31afa08afaf29fbb98ac4
- TLSH T1F731CB503FEC0624F3F78F7794BB572089BFB8568E20CA2E4041460C5436A15E13AFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.