General
- Target DOC-55Q3FA.zip
- Size 595B
- Sample260804-kgr4sa1tgw
- SHA256 6146978dcc5c79ea776305580f149f6c5ac2993836934f8e55f09294dffb190e
- MD5 f8030de06dab76f1753d3ae6dbc65d3e
- SHA1 3acbfd8fc1ff26b697ce213f34df8c0e82c158fa
- SHA512 de39a1956ab098f1a0a29fe3d4df327198afa0622a90b9e08fc7d1d29c40134bd75c4dc25124c957d7942f4c39eeb105a354ab4cf0c7f5b65c9b273a27e2b348
- TLSH T173F041AB73D2821BE80A6CB4F873A1BB19225489236FB00CCC7E50D504295F36C91208
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-55Q3FA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-55Q3FA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-55Q3FA.lnk
- Size 1KB
- SHA256 883b2b7e044183d913b2c48c95da70a7e738d3ae81324c5a52cb24272136e65e
- MD5 b186e1c49fa5ab1e413ebac9b19c965b
- SHA1 769b7bce1b168eda8065dc69e266dc6cb5a45666
- SHA512 d79e1fc8466ba2cdf7717f7ebe54dd446f4e6a502ef9ea298997ffd8eacfade71caf1bd3b470b3ab5e9309cb0c903452d2b610e55b05a14d54821d0ce7694776
- TLSH T187319C002FFD0554F3B38F7288BB971095BBB8A68D20C61D0140450C5032A15E57AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.