General
- Target DOC-DY6Q0I.zip
- Size 587B
- Sample260804-kk5jaawbld
- SHA256 b7874d7ad59b7af29377a9bee23a3f5899cbb0117b32374fc285abc16707030c
- MD5 abcf1c90a31694248df4fe6c144c0d86
- SHA1 dea73badf56616f715626661ec7d0ab33e12876d
- SHA512 0b3c190ef953f898ce732a91a87e2e7cbf15e8fbd68615900274f3e5dc1ad6f6b717301d9ffa13ac4770788130f4a20851c72f84e226afaf7b07bd11c511e0ad
- TLSH T116F0E161518E0012DAB34E75C624638E9E6D02C1483E23FAE34BF8DE641412B8E77163
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DY6Q0I.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DY6Q0I.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DY6Q0I.lnk
- Size 1KB
- SHA256 3b468f32c6148b20ff9952c82b23dfe7be80be480036f0448d6e3aae7292732e
- MD5 db3049d5fdd87f96361c96cb6f598fa2
- SHA1 778f8b75a6fee68f758fd4faaab5f8db97d0118c
- SHA512 f417983e005b3ccb485323269bca7ccc474d8ce03efc1fa0b7794777dbaf5f4ea996714ee0e32e8dc5b2bac969d05369236d232ebc2e83b8a804cf778496911b
- TLSH T1553147503EED0A24F3B78E7698BB672485BBB9958D20CA2E0141454C5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.