General
- Target DOC-D10A6S.zip
- Size 584B
- Sample260804-khtc8sgb93
- SHA256 b371c95a0f12573de0f7c8e600f98fad93249642d0cbe37a87461567d81403a2
- MD5 55ba4e1582a767f731a0d83682be054d
- SHA1 f5afc9e708cd862583b5e672207930792f0f9858
- SHA512 f632e2a03a1d65c9b56139093daffa3da1c3af7d6d90fc28f292111d78353fbda3a27c98c2119d776637fc1dc5d2bcc894abc4afa81ade1bbb03b2ebff6acaee
- TLSH T1A0F0E1B127726989E986E37962CB10371B101779C28228A73965CE29DC041E58C8C071
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-D10A6S.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-D10A6S.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-D10A6S.lnk
- Size 1KB
- SHA256 4a048faa72fb1b9c68a598b39245ee584576a095b5fc1e13cd48c7cfa09ee556
- MD5 364333cd9fc839a3da82e826f06ef166
- SHA1 4d7ae020f02551ff2bcef0cdc545666a784ff8ee
- SHA512 54fc6fb4e88ae8a4ff2a595b74e75b0d8bb867b226966bdcb9b38245a1c656143890a3ccf5e8a9e6929eddd6d9a08f80aae86b51949be9096bec8788b30f0edd
- TLSH T12D3197102FFD0624F3B38EB385BB972889BBB8568E20CB2D0040454C5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.