General
- Target DOC-N042W7.zip
- Size 960B
- Sample260804-kh1gjs1vfw
- SHA256 fd62079b13a4540396456b063bd9b24aa5559450b06206cb77a82a785ed51afd
- MD5 257ebca81b80df7fa2de1ba0343f3f2d
- SHA1 49d6798967145e5600f0970cb6bd4d4df56af998
- SHA512 2259cf9622025b13b660839a45b7b640f12e35d852d1fa8161a90799b1a86a37a8ca6dcbec8a2c50249381b7765f77f3426c16bda306da2e2493c4d242add97c
- TLSH T1F211C8A7D1309537DA415732135339ACDED0E1C3C42B7B960824F6CA65740DD35452B8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-N042W7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-N042W7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-N042W7.lnk
- Size 2KB
- SHA256 012679f0ef57800bf172101a1cb40e374dacb4231cac5a5c35a0e217665b627a
- MD5 e03715410699395d00a7f0e633f9a471
- SHA1 6f947a5e0b25265dd79f6a9117b2823db6f38f2e
- SHA512 2e1c3ed8479ba9a7e73e25b256519d173580faf968a9b47f045ec35c1b12d2bfc5a6858cadc0a6edbd72c705befec022f5cf61737594a64217ad9e8fc04c519c
- TLSH T1624133902BEA4098F2FA9F32ACBE279185BBBD516D70C59E4840814E4C36B44D677B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.