General
- Target DOC-PS63PN.zip
- Size 859B
- Sample260804-kgdw6avhpg
- SHA256 2b55bbcabe9fe2c13565857bae3ac3713da4510b260916868de12f2ec6f2fec1
- MD5 a90e32d077ea6918e7cc5a52e8be2092
- SHA1 a6e402fdbf6245c11e42552aaaedacca4e5f87e9
- SHA512 a8a5c94aaf929632097febc2162506b5b03ad64337f6c7c9560aa0d66d39480357167b309a57441b2aa112654f472e56873b4c67a1510d6974d8577d057a0138
- TLSH T19B11563E199D5845CB076AF2D81F0CA4E09A3AF521C357762531F01AF49087E1BA5A29
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PS63PN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PS63PN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-PS63PN.lnk
- Size 2KB
- SHA256 78c731a2fd098422f77e7578176fba98cddce7a41b6f873c19d241f156d19b1e
- MD5 3002b30936af67a524390aa10a8ea262
- SHA1 ae5a2ea1e71b357bfabd56046f609df68e4aec12
- SHA512 02b0b49e7bdcbcfec14571cbfebf16d591e084b6e9ac7718b1da16bff5a9b8ec3983fb226488acde03cf006f1c3ec2625307ae769011b1ace6855227bc1fbd01
- TLSH T1D94148403AE901D4F3BB8E37D8FA9314547BB8565DA0C65D0890810D4422B05E5BBF73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.