General
- Target DOC-O55IMY.zip
- Size 929B
- Sample260804-kksjqabl8w
- SHA256 be86f45beaf5ad729803091777ea8bd6873d109aaa4b33b9a8b0cbfd55a1edba
- MD5 464076f19075ba81279baafea4aaa9e3
- SHA1 205b69d9e9da3669398e00ff5aa7835bf23e4451
- SHA512 8d9f8e5e149a4390843a477060564d63312c5be5abf055edd7a53a73b7afd9e0f6ba72a8b46e8ec6289f3d3b2ca59d16c6347986ba7a863b2d9765f784ffdba9
- TLSH T1B511B75F8262C4C9EA60DCB6C6209BD44486CA54F5875FDFD094E11598B4284F279CD4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-O55IMY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-O55IMY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-O55IMY.lnk
- Size 2KB
- SHA256 c68dcfce465dbd42a23260508924c2820495a6044695951f69461cf4b92475b3
- MD5 834b995dddad4713c316d33f25f079e6
- SHA1 d5e603240942e40214f5c8659abd18681a8396a5
- SHA512 65d1589070047587ac256448ace481afb7a985390db20a680211b084cf06784006a632b0579be91ce917305683941458540ab366e81f918ca40cb486a7a000a4
- TLSH T1464156903AEE01D8F3BA9EB2FDBE735145BBB9928C30C28D0850C20D1432B00E573B22
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.