General
- Target DOC-U5XEWO.zip
- Size 591B
- Sample260804-khgdnswakh
- SHA256 03e618e7badd591e225a2bf24159295586041905545b46380a0cf8b7539889f7
- MD5 29e91b932fabdcdd096be6d2c92dc7e9
- SHA1 5c5e38d59957d5215adc1a25810f23d0a6909662
- SHA512 c54ba108600721d28b814ad07c2951d1a93e4797440aad1b94a0dcb0983ec19bdfb75cdfaa36368218fdac9fdb5c96b9a052f66f9a2fe12f2dc6ad8e2917a3bb
- TLSH T129F096132F16460CC49EE07B78310D0977C3C3C0570A930302B5D002D6F31B318A0878
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-U5XEWO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-U5XEWO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-U5XEWO.lnk
- Size 1KB
- SHA256 72f16f6f698b140679cc65e89efe477af794bc4e8f202c49872bb11cc82520c0
- MD5 c7a45d43b6bda9dd67d3a384b3db573e
- SHA1 bb01da6eb0a29cdff12c9148ff0424e5e5e6aeff
- SHA512 abe40aa37f42fdafd880e4122419b938d14ddeff0b66c4ce044eab46103face17ac3757fae898c2fa2221507ec9ae3750351a3bf567c7f9f8a397efa59ff0dca
- TLSH T16B3197103FEC0A24F3B38E7398BB572485BAB9968D20C62E0240454C1032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.