General
- Target DOC-R1QHWP.zip
- Size 581B
- Sample260804-kgf2hsbl2x
- SHA256 05e13e8e4ac432893a14730fee8dedf180c32315a4e8a947336719ec9232b0a2
- MD5 93c97d6c16965c2b597a981dbea318ca
- SHA1 7b7f730faec73880992bc7a4d4027a99d84f1b14
- SHA512 0c82c20bf09893898a9d7ce280bdf87c685c1b23d856dc35a05d1194f328d1885f38f88d888fb267dc537039ea1efff64a8d538e2d9c20828b08350854c0fe59
- TLSH T118F041B71D748F44D5CAE036359E215220656CE3432343C7141FE60398052812E2A6BA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-R1QHWP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-R1QHWP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-R1QHWP.lnk
- Size 1KB
- SHA256 0b845174880af3ae8becb24e87d8bc2badea97eabaddb47ef8982cb35b3ceb3f
- MD5 35a060f0c7cc734ea6cc5135de528fa7
- SHA1 e81733836639479549e48216e04ec0f93dfff7d8
- SHA512 fdbe2a3cbb5ffc0f8b606e0756c2e214ceb1e1c72facd6c7a68a4cd66650462c640e0841cafb37704a441c37681221e8803c36b4763ff6e2336c6d0b82f95e44
- TLSH T1783147503EED0664F3B78F7799BB572485BBB8558E20C62E0141454C5032A15E13AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.