General
- Target DOC-5RXG8D.zip
- Size 892B
- Sample260804-kgll1agb82
- SHA256 f93c75de2acdbb7be6d74d66a5bf403a3fdb96df4fbb668143513f540f043078
- MD5 4dae2969ae9ab12a44c0b836f044f293
- SHA1 a7d132351a15a35b5f471216803ef6c9b3d88889
- SHA512 1916e0a7f0d14c03065ce90fb14cf321d25726485e454f40906f9511bc1ef7908cc307c2e8cf9157470a8595845f0e984dcb4b3657730c6bba12ad0f7ae48508
- TLSH T1B111E62304A0E95AC9AFC7F82680250602136B6E640D5E2FEE0B96107B6125C6CBBC06
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5RXG8D.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-5RXG8D.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-5RXG8D.lnk
- Size 2KB
- SHA256 f1ae2e529bf563b64f9cd3afd2bb1a0f393b0a73eb976cb9204ec99ab6813ece
- MD5 5eed9bb61c357988e5135b2905dc7267
- SHA1 ab4ec624e75693c9ce06dd4fcb29fe2cc0fbedd9
- SHA512 20261afc343f8a12352ac186e42393329ae1d1beb4898086a57e36d88ecc33a874e26a7f51090fae5cbf2d1c287caf4927ca6806fe386800f2ccd9089fca10c7
- TLSH T1AB4177902AE80198F2BB8E76EEFE6B90587BBD026D30C64D4841814D0432B49E973B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.