General
- Target DOC-W0QN6D.zip
- Size 585B
- Sample260804-khsrps1vdx
- SHA256 3bb46a52b9dd53e7eb10228f9add5d6aa901ccc9fddba93bb91f6f61b1aafca0
- MD5 c2a44733501ef901c9db4517420fccb5
- SHA1 f8b6560edf90ba76846d3ae2b8aae6bc4e69d9f8
- SHA512 50a1d46f5acd85f4e50e457ff89159511f3a871f1a926e8965dde6e4f17fa61dde19c9cafd9a93c0835a69e3914d9beeb2d0ec85367b07a0e76f225487e127ee
- TLSH T1B3F096A2A94FC44CC59341F47090811586F4C54700C7050DA8F1DA8731263BE4D3B7E1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-W0QN6D.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-W0QN6D.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-W0QN6D.lnk
- Size 1KB
- SHA256 050d9e80823f2c086c37d063639476ad04d4655956f806aae9140a7ec8c2df6c
- MD5 2253897fd6023327f681e1c633c874d3
- SHA1 6d0dbccd7258fce21c572285122ab8281670b61e
- SHA512 b9404192a5d33e82035841d5d9ebf7187e561bfab9846fa2bb59fe1a1a6f03c8942ee6332d0d58a8819df7dac438b2f22a47b4ca0a8ff8db3d78066438331ec9
- TLSH T16A3197003FED0624F3F38E7384BB572485BBB8958D20CA2E0141454C1072A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.