General
- Target DOC-DWW91I.zip
- Size 857B
- Sample260804-khd9ba1vbt
- SHA256 e3d67f20b531db6f161a3b0c8d7f97420d8386ac6dfb06389f0beeb0db30d593
- MD5 c1d9ffedeb02c5d410c40c3e6a5d5702
- SHA1 cce706f891bb58e9b74d2e6a037b7aaabf53c5a5
- SHA512 5241da7707706d77558fe81df17635eccb14f8c752c77fa93cdcad52ac9614f89c8b6d82dbb28b00e6022f98b8e6ec8dd54a7bd09b62325b9024a7d243e4e769
- TLSH T1541152FBE314E600E3ACD37A94284A8E23762C821C1BD621F919D62A10195D286EF07C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DWW91I.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DWW91I.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DWW91I.lnk
- Size 2KB
- SHA256 ae1a5ed8fd89f9b9e486bacece85b43a0581ed851be9ac5a252069532a5498e1
- MD5 418a260f013ef08cbb73dd94706d253a
- SHA1 636020a9d2836a44521238977af64f64ba5b0f66
- SHA512 e06f59499996428042a9bdabbb36bad7c7ed3421f94dfbd5f8ae2aee5830f6c55a39625c0493d866ee1317b9e424e0cbfa41b830a582b0974f1131c91f6cfaab
- TLSH T1F94127803BF904E8F2BB9E36EDBE67584D7FB9454E35C68D4580810E0822B01D537B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.