General
- Target DOC-EAGSLW.zip
- Size 916B
- Sample260804-kk8wps1wc1
- SHA256 a06928fbc21d29769ca5dfb3a7ad9bbca1a5d6e16451d9df8a7c71224018af16
- MD5 2d059db9f410e3ed786e5912ebf0b08c
- SHA1 a5e7cd277b85eba169cf7d969d2178b0aa445152
- SHA512 c285ae5449977682654f8241b9946fcc3d2bc503151e1095d41f8be6a8b58feb62ace04d0dbcd153fc6c6d577f4fb791835329a741db0e9db9eadbcea77cb0a1
- TLSH T14D11B7B59106762FDD5ADA30439C294B4232E147372BFD627031CD26EBA10C63CDE8B4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EAGSLW.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-EAGSLW.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-EAGSLW.lnk
- Size 2KB
- SHA256 5b62182f05a7b1c936cc7cd3d61746e7aee645f2a19ba57878be42068d97cc70
- MD5 d36c3b7d77e310472d89ee9f06d432c4
- SHA1 3a5a5f771558e129b0ec1e880bb8392accfcc779
- SHA512 37ec47a908b58273703a819c044fcc910075c312c251e5eeee204f94a716ebc5030c8faae7e878d352a85a12658387d541ace4dd65bedcb9c5b8dd7be9b0d8e7
- TLSH T1BD416B9037ED01D8F2BB8E76ECBE6714897F78915D31C28D0450824D1922B01E5B7B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.