General
- Target DOC-O8DVTN.zip
- Size 901B
- Sample260804-khak5awajf
- SHA256 711dc21c8ff0b2cceef2ac0386d18c4bee2712ef47924157c75819a4452c1620
- MD5 4099a67c6b97f6b040aaf08b614bfc24
- SHA1 4911c1afae647bf709184dabfec8daf8e6b08bd3
- SHA512 de559d01eaee65546c180e57fe0fd29f379424e0ec4415d7620e6296335750086157f316e94017dc6066359e7d125c16d6d1ab78a5bfce58902b28e0320868fa
- TLSH T1F21163BF1796095DE51F903D46A961E640B98243288E669300BFC7DA8A9D043DF17269
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-O8DVTN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-O8DVTN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-O8DVTN.lnk
- Size 2KB
- SHA256 2c851897b80a99b92c56c587eeb6c892604f8703ec116e55947cc44155bd4de8
- MD5 65c787f3408a4f317057e4a96695e800
- SHA1 b7abe42e377e2b61a4e395e4cd48e901e325d6fb
- SHA512 678d085f754af15249b0b29f8b26ae42a4bf7b7bd8684f0f0569f431f0694a567a7469ddf698005a4e928bf5ad05faf05990b1b300a225bd3ae6e330931e88c6
- TLSH T17E4138813AE905D9F2FB8E76DDFA2B51597BBD626D31C69E0950810C0821B01E933B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.