General
- Target DOC-XMDP7I.zip
- Size 923B
- Sample260804-kgwf7s1thv
- SHA256 518eff1b9b7e3a0e0598ffac87ca528a33fcb09c0d65e42809ff6878d464d60f
- MD5 d4d22ebedc8338d29a448cf45798031b
- SHA1 93a0c893e720f70c85c6395d0e7ddea194301923
- SHA512 7448aad7f6e5c2f7c5adc67a273339ece50afe72a1c312ee6f42905851f4d4d44b3a1be7224f3d4564b44c1d3c5b315e3e93ceb01a0d5bc68cb3a299d77d4cfa
- TLSH T1C31167F58508241BC95A13FD823D2B49B178EC98855DBC87775CA60118537746D13D9F
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XMDP7I.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XMDP7I.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-XMDP7I.lnk
- Size 2KB
- SHA256 7762ce19acbf89e7d6d79a057b5983d8ae4630c793b10ca8c4b8b3186f45c08d
- MD5 d61e76f762f004eab8dfbf7d69e47c10
- SHA1 ae50e018d7bf048bc481921b8ab9dddd35fbe159
- SHA512 3a2c810100c31defb0406654d5051a1889e99909408a23db3a7b94cc18a3c8ce8bd18aa7c46d87d648cb3a87464be1e2ae8fad41d52572155b040f67f882d3d3
- TLSH T1734125942AED45E4F3FB8F72DDFE6B51457BBD665D60C99D0840820C0422B00D8B6B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.