General
- Target DOC-M2VSQQ.zip
- Size 590B
- Sample260804-kkrmes1waz
- SHA256 04d30ec0a393dd8ca51b8ae943d5bca2919d4e5dcbc0441adeba0c7acb421f72
- MD5 3b453e321de1bf1bafd8fe9452cf09a1
- SHA1 64343ce8dd6452fae9d0152a8a994a38796f47ba
- SHA512 19a36f08609fea5376e0f25792b12160246e03fdb107d3a0d8867ed3c06f568f71fc656fc173012230545d83baf21bf1e59d0723318e7f21a36c60f0a4ff03bc
- TLSH T1DEF04151C7A3CE04C6C1D139943E153DB0C8448C21066D737AF2B4323CB029A1713663
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M2VSQQ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M2VSQQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-M2VSQQ.lnk
- Size 1KB
- SHA256 0e2ffb8e17e23245f51859ba66a02eed355e869239069ee832e66cfde3e9effd
- MD5 0a796a1e225a58f009f7e01ad3a73c33
- SHA1 e74f49d66aea4bbd3e80d6b39d5a8e876a22913c
- SHA512 7cba094ea27d13fe77ff7efbb9ddc37e6bf469af8509a1f864cbf39beab9bc80c5c8b6754cb0b5ee79fa67246664156bc1a32ce764b8bbc983d8d95f731a8525
- TLSH T1063147503EED0624F3B78F7794BB572489BAB8959E20CB2E4141454C5032A15E13AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.