General
- Target DOC-HB6WTB.zip
- Size 879B
- Sample260804-kk31fswblc
- SHA256 5ca2619bca708886dcc5bfbb24fad6c5e63f63d3c8cc3553cf8a6d82ea48f7ac
- MD5 41ee73e71d30d9758878c35715d2d96f
- SHA1 915c23893e40d0664673abfa788a99c93a45d5c8
- SHA512 746c223fe921a316d6a91c91c76d714203195f82431a33ce37fc964447d00dff7f6b9b9d5eb974d4c81fe061d319af9f00a63cb85771371d8d600f34fc66d5cd
- TLSH T12111968792040C57E91B1371D0622BD2DBBB3A9103945A4839F6DDA5EDB83E8404EC16
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HB6WTB.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HB6WTB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-HB6WTB.lnk
- Size 2KB
- SHA256 6309474eec742cc91e2feab497889fdb76a87d7f8d9d3de09340b63a279790c9
- MD5 d196aa426b962abb9b9d7824653b91b6
- SHA1 526f2d7bddef9eb2619ef584ee7d61fc6c898818
- SHA512 b8a7908f41718dce378f063b1f40e895a8a7495e87747a62e481ef9b48ddbac30ebe29d89230e4b9d20b5b9368933b699de2085e75ffdb695c94b2af453a769b
- TLSH T1644137843AED01D8F2BA8EB2D9FA335084BB7D925D65C6CD4840810E1422B05E57BB63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.