General
- Target DOC-N7KTO9.zip
- Size 840B
- Sample260804-kkrmesbl8t
- SHA256 3a7d66023e35f1de82e4a264a88f50c67b50c7108fcf04de2038c4234439f960
- MD5 7d83a33eef5974b655ccb6656b3007a0
- SHA1 1d24d85ddb86c93247bf17979234d6ef778fcf98
- SHA512 ff8afe4670f687219643c4607d2f82c4be16cdc5eaf0270784a26f09bfbc01c86bffd79cd2c5129a814f1e6350b0e860b09d97e1f8453113c203a2f2a357fa66
- TLSH T1F001866BA110D14AD3377439176171C6F09A66BA1426291336FC4A6D9FDC042EA6FC23
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-N7KTO9.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-N7KTO9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-N7KTO9.lnk
- Size 2KB
- SHA256 d81328d3519a48a7900e7e8a5276fe9399d95cdb1fc85deb19cd357946312573
- MD5 eaa113672986d905d2d4891be2d16e1e
- SHA1 7da7f305ce139b8effd764292734cb40cf756c83
- SHA512 426e120576c15b3475880f46a0deff9474daf2f23eddafb171a783f0cbccfa3947491c0b1ca4667d05a870d02c7dd4bbcc1c2080b3b56ccf240266d9cff16d26
- TLSH T1A34136803AED01D8F3BB9E76D9FE375045BBB9A25D61C6CE0950810D0831B00E577B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.