General
- Target DOC-GSHE9Y.zip
- Size 832B
- Sample260804-khrvea1vdw
- SHA256 9698eb57dda9ededd35d8f128e5b0c589f47e5c47718dd4a263716f1c88da477
- MD5 5060524f81407cc8e05438db5d1e6440
- SHA1 d7de738554db171c01fb5ba47b8870de000bc79f
- SHA512 c82dff933106cf92f92fd8c0a9064f4534fb458a42ee2408b1cc9855503b0216d43920ae0f162f966982d4464d93888fbbdf883d61ae0b092cfecbfa978428b0
- TLSH T16601D68247108CB2ED7EC1BE6196C045C2D60FA3C888D70EB86C84860833EC42FAA1F4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GSHE9Y.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GSHE9Y.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-GSHE9Y.lnk
- Size 2KB
- SHA256 26f26232de0f958f5b87af3fbd2d2c8655ecd9ae17df277e010b03d06021f217
- MD5 8601d9c4f0ece9d65b89526432b4651d
- SHA1 c1474d75904b5b95e0cc2c910627b0fafb2c97fd
- SHA512 4d3a7bd8f3293771072583e1e812b84120ab70b160cb7584db767d5aa491deec07f89c474cd4682aa84205570c5351b769ede004199518480e921c85f5b7f29f
- TLSH T1744137843AED00D9F3FB8E36D9FA27505A7BB9925DB0C54D0851810C1022709E8B7B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.