General
- Target DOC-0QSUFI.zip
- Size 586B
- Sample260804-kk6rcawblf
- SHA256 77c78a619c93ae72729c4454df582187c375b629075006df8178b68013c236f9
- MD5 98ca2342c037efc5fb101b14028cd7e6
- SHA1 5d91fc848ad189578e0ce1a36abb8277e021deff
- SHA512 d20122a88384c2b9a5ec30418da38cc3519752f8506349fb40f9e5bfed31c0dc15fbc71d3986f7352b0621321c5bd225b9c8267dc2c30601e60c9663a2da5263
- TLSH T1C5F04131E1C04825CC12837980723ABCA2A4D0D7953F838D1E1D9CD7C8056C21CAA2E7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0QSUFI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0QSUFI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-0QSUFI.lnk
- Size 1KB
- SHA256 83f38ce290b6cfe1f32fb42a06a3e813e892a68875d3067afbc810e389098438
- MD5 2cce80bd697a14db679b4862b9846ec8
- SHA1 f8ff5821f50376b200fd42ff38f421cc09557fb9
- SHA512 fefffe286f7cecf93eb5ea04811beee7ec63c62e033b57c81ada0b2d1b37f7337b4502bfa19e65de4ef40a07525673ae539697cbeb3d3ca5a002d60b3346cf08
- TLSH T19C31CB003FEC0624F3F38F7394BB672489BBBAA58D20CA2D0140450C1032A15E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.