General
- Target DOC-PFEI4J.zip
- Size 888B
- Sample260803-qf1mesaa79
- SHA256 f3cf837997343acd4c62e083db685515becb4497676d29fce3dd05237d755843
- MD5 f166cb31ec1d797affdf3db0889273e4
- SHA1 03b313e5c8e9418433ad46aa534188bb678d97e1
- SHA512 9ba356630f799026098eaf112a8b5a66ae6245265ca9a9caf0a11340956f67f4e5d4b3a3801d17d8d4b1d0e5b05bfc79a9fcee47a163b7ea95402506e2d15bd2
- TLSH T15711567D65C7F003C6C7E07B2939E606FB2B64C58014C98B993C558848482B1FBBE13B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PFEI4J.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PFEI4J.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://br-adobe.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-PFEI4J.lnk
- Size 2KB
- SHA256 4f1af24952bca55183b288b9b0cc5867dbbcefcb0580f5b405010a756f2ba322
- MD5 8c504572605a7ba25ad541a8950816ea
- SHA1 b6ed01c99a643a7c2d94a9fb16e5f14264c573cf
- SHA512 191a809ccf8fd7b6e779633505bc2b1fefb3e76b3956c388eccccfbab04a9af986bb4ef8081125f1ee770d70fac605779a04fe92451af6e664a757dda22276bb
- TLSH T14A4105807AE90599F2BB9E76A8BF67418C7BF9916D70C55D1940430E1832F01DD76B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.