General
- Target DOC-477SCL.zip
- Size 582B
- Sample260804-khv7tsgb96
- SHA256 8e5292eb86f0e0fd2fcf4bbcec884a5ee43e00a05ea31bbd31b1c2e386bb5273
- MD5 b1657d07ee5730ad2d158cefbb1ef127
- SHA1 ce64f3b78f106bfa8f097e87b84830a63637ac26
- SHA512 2c7593f1bb081bb005c39d0541755bd787d42c7b6536c004aebc98455ecec7c9ec139a873267951f56582bdb1b6087753cdef789549369a1762a9c62cd24caeb
- TLSH T1C5F04136EA27F540C803903381B224178B22004B84170DFE027BFD8BC12D20D8EE84AD
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-477SCL.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-477SCL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-477SCL.lnk
- Size 1KB
- SHA256 6e596016590d3d67cfa61974f105d3262d0da734c09823855c51daf108711348
- MD5 87b4cbe0a363a0d8190604b12ea4d3ba
- SHA1 15458c72e8518c4c8a427821b44949d43061c1d9
- SHA512 0d761bd2ffea29ec0d6449e85f33083469e1cb92a0eccc9cfa69fdd6d33bd4608044f9ee28ad29a16edcb73a7cbf57d7e12adb69f194b278c59a681abd241c2a
- TLSH T14431CB503FED0624F3F38F7398BB5B2085BBB9658E20CB2E0141450C1032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.