General
- Target DOC-0RRAEQ.zip
- Size 844B
- Sample260804-kgylka1th1
- SHA256 12776937fd9bc00311ed92bcd2475596184e08fba89edfd37aa71a3133e2b93e
- MD5 4cad78012a848d98e6a468c146ce6ebe
- SHA1 8590c7661623fe0237506807cdb2ad753dbefcf0
- SHA512 5f26e262d1a7d7b1e7deaf0fe0a87af8fc7e24e01aea1a778ce42194a6f24fe4a74566b2d5b1d6df2e1bf1a096bfac2a4cb3912d30eea924e4ee6c34c81381e1
- TLSH T1810186A39215BA03CC26A2B883B92EC79126A57D109A6A357E51C9C55D10141DBEA6D0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0RRAEQ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0RRAEQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-0RRAEQ.lnk
- Size 2KB
- SHA256 e8bad6e2f2b77e05406e0fb7f517eeba2dc0e989b62901002dde27b8042e64fd
- MD5 8be40e5f9108186c81266e992b67f589
- SHA1 90864242bc70c867c6b74ffb7ad6d514d4d0274c
- SHA512 7543c17ab0a98c683af1b39d8187f93ba409227bba319837a75efe1b10ca7fc46519aeaefebb232c77355ef283672c6f6e3ef95a6443d41d3f9ce8d49fbefede
- TLSH T19941678426ED05E8F3BB9F72EEFE33A0857B78926D22C65D4490824C1422B11E577B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.