General
- Target DOC-7N8R6Y.zip
- Size 947B
- Sample260804-kgmjasgb83
- SHA256 5a8f98b5cdbc331256e2e6b922b391aa1365773eb8933f38ea036624b74b3510
- MD5 6f207c58b4165929bc696989987fa468
- SHA1 95ff25598200a7d4844604a1e85f4287a0fc6187
- SHA512 5cbf492137bfe6a2d967e5e870144390492acb645d953359853f77022b8f5ae950ba370db9be8f15c403f68fabdbf3aa59dc8305e2cb9a3750bc41beaad23f46
- TLSH T11F1114A60080E1ADD247C2BA27B478C65898899E924FD40390EDEB453D09565175F0ED
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7N8R6Y.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7N8R6Y.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-7N8R6Y.lnk
- Size 2KB
- SHA256 c3f4a268699d1d010abcec78150963df87d818350a37b56fd6ac58578d91605a
- MD5 1445808413609e6b86d7d98f7f4a988a
- SHA1 eb6ddf1f408996a54a35037725c8b18ac6c399ab
- SHA512 f6e96714886eaf0cf64394919d6d630310378610d73972b9f1531898ed84a784ee75bd122f0af71431ed1b4444df30aba90596f78b54f7cafecc91588c92da01
- TLSH T1344149903AE90088F3BB4E36DDFA6791897FB9561DB0C55D0811820D5822F01ED76B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.