General
- Target DOC-U3MCIW.zip
- Size 584B
- Sample260804-khb4yswakb
- SHA256 dd5a25c64cadec0b379765b7ecef860e2864db90e8789a8b78617fa225f8d6dc
- MD5 ab5fcac124fe26da3b10d970f0509436
- SHA1 46ef4e86a5d90aa373e04441c2ffce4f87610552
- SHA512 5f2a193f45d5553e4c5e3bb608d074895ec31ae54f2f8cdcdf79c57cdeda1b81f8cb8c26c6319f982444689b7ed590fc8405390f794ea7146e750c818c6e3f5d
- TLSH T14AF096C18352F01DCC11C8723028F22B467731C11716F69A7354E802649F3F2B9AA4C2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-U3MCIW.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-U3MCIW.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-U3MCIW.lnk
- Size 1KB
- SHA256 80d3e21ac437202d9548ca2fdd6ad295decbe77d52e5e02dd5952f19ca7b5e01
- MD5 fed8592ec2f3b201bd9653262a43d3f1
- SHA1 9b9644b0cb35a3a697277cd1601e8bacf93a2d32
- SHA512 d5cd045f9add5a12b8d35ecb20b31a7f34033fbe19c2f9da974b8bdd54371fbeaaa7a2846178e2ccc714637970ff3cff9902bb141915e90760aa3a189ed6afec
- TLSH T1FF3197503FEC0624F3F38E73A4BB572085BBB86A8D24CA2E0141464C5432A15E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.