General
- Target DOC-SU85YE.zip
- Size 584B
- Sample260804-kksvgswbjd
- SHA256 fc84de14039c646a88f12f39903285b2d6dfd28d7eaa96931e442099f501c8ec
- MD5 a571c265fd27855fc94a13e6a546a538
- SHA1 7d4bbb34a86a08eebad927a0da983cb0fc1bbfd6
- SHA512 a010e54ff3cedefda0e5f5c16b382eedfe394f5212052c2b56ae442ae2801b46b0ca25f6acdd6e72669a619d70543f38ee5386e34e8f02b2d0fba467dc5c518a
- TLSH T15CF0E1B38F2CC186C645D6FC18B1305041ECBDE67A474ADE61345CCB488FA8507D0626
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SU85YE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-SU85YE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-SU85YE.lnk
- Size 1KB
- SHA256 b440ae4557462d46ef0dc9db759ac75772a30ff43385cfa119a91b311553f00f
- MD5 2afd97ec87f4a268d7f082b79adc3862
- SHA1 3823fcb81fafe2b33a46d6583ddf00f1a18896c3
- SHA512 0f86ce49d2a76518a1e4fe8d535f7d929e6247661989b1adc61c0e9181cda965bfc24eff53d1e6591fa8948a9faa4a4ccb187c3af13a5cef5b8d7991f476cf39
- TLSH T1F53147502FED0624F3B78F7694BB572485BAB9AA8E20C62D0141454C5062A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.