General
- Target DOC-852TUS.zip
- Size 843B
- Sample260804-kghv4sgb76
- SHA256 3a58026378090b03d496fe14b85dfe003852c55410a0f7e7d0457a1685b874c0
- MD5 5a69b8fa2556c949fcd7e9a5f92295b3
- SHA1 fab020484be2e62d72c982cf9f1611ae756d996d
- SHA512 252727b7c5fd5a187aaaa16bccaecebd4b534313662fbb8c42ea5af36c28d3eab6f2d8dfad37c9c2b84608204258a919e2a35c9baefe264e46c4399693023fce
- TLSH T116018677C428A313D53740BC8C5D11CBD6A178A36246B83526D87E963BE5F0B4C1D2CB
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-852TUS.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-852TUS.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-852TUS.lnk
- Size 2KB
- SHA256 990a8e78ab68f36108b01d8afb99334a08daf83adb0d90e3ca7044dfaa2c0943
- MD5 30ff82241baab6e5c5f43a2322af684f
- SHA1 b7bbfcd5674df49377b067b43d3744a5ee66e6f3
- SHA512 ed224a720637ee4f70200ec300d5ba52fe55ca68d563daea531d66f68fdc1071d05333c2d1ebd6246c3479ddcd26c7f64009e23815aac292d7047704eb2f9ae2
- TLSH T1A54197503AF900E8F3BBDE72DCFE2712497BB9605E70C58E0890824D1422B05E577B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.