General
- Target DOC-9043TD.zip
- Size 590B
- Sample260804-kk7nms1wcw
- SHA256 26a191a057a4eb0e9473827e0971afe2303a84f8009c3c679f042b95b82bafb8
- MD5 00cd18649c8a41574d0a8fd06a9f65c6
- SHA1 2ce22e54c9b09926d09ffa92d4df26bdc5f8d527
- SHA512 1ac8c32b11c680a24a459671858ff7147378834bdabc99e644e59233e1f00e401ed1780ee5d5294fce29cab9a581a9eabe8ef155d7896f828e96cd37e84436fc
- TLSH T1B2F041ABD6DA6101D6038C3039BAF411121DE598078E4BE6042CE88A7B2CAC49C478D0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9043TD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9043TD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9043TD.lnk
- Size 1KB
- SHA256 5bde6b96c97cc9d7b6c2744c9a2d66c0d2e1391452159a78caff7052176aee07
- MD5 2df376ceeb24dc5857a03cff77341eaa
- SHA1 3050fcb8966805abdd891734d4be624c5b3d75b3
- SHA512 d8f713b1c5eb678efed8640eb74e2584e396e67773efc44134fec3f6742e5f3ae7463887bc93a07de99100200f933ab9601d238cfd45faf2e893e90fd2e9631b
- TLSH T1B731CB003FFE0624F3F38F7384BB672089BBB8968D20CA2D0141450C5032A19E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.