General
- Target DOC-41DMJH.zip
- Size 883B
- Sample260804-khvaja1vdz
- SHA256 f64f3b3061d24aa453f948fcfd8bbfa6ea57b3032ffadb21297657d0d8a9713c
- MD5 a2e6e33c18895f84a57fadb003df1d2c
- SHA1 133a897ecad65a3d05b1181359e73efb94f9cea9
- SHA512 b62d55b131ebd7846ae69f5e7a6a71db18ccc5302f21cd4573289cecc13f4d25c0daeca14df7168a429a6966a0a467c9dc123d037c26cfb8dc2e4f51bcbbce9e
- TLSH T1FC112796D9215900D5D2523E013102574BA211E540BF6BD1A887FF8A5CB1FE5D60B531
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-41DMJH.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-41DMJH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-41DMJH.lnk
- Size 2KB
- SHA256 0e73d4d869f8ae2f9b4e9324ac5d59ef0f21823128cc72561d94b5044cde1363
- MD5 11b5abf18855cfd81f88bca1935f5b86
- SHA1 bdb2e534ee1f7116b84d68dd51287070ff3a1fe9
- SHA512 6a655e440017e7fca28a64034ce46f7c4788134071a38b38c3818a9ebfbae0554eea4fb0ca6e72c7c858ff6b85f557045bc4e0bf221b51933973a9786fa6de84
- TLSH T1DF4147402BED02D4F3FB8E32DDFE335185BBB9A66D60C68D0980850D0822B44D977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.