General
- Target DOC-P99KYJ.zip
- Size 880B
- Sample260803-qfsltaaa66
- SHA256 975da0eb730e3c3e891845ee93f15045ebd9594da77165a3e92fa2be4f62129d
- MD5 86ab86cea23dbf5234483874d940f158
- SHA1 086db929cabf7fd2f75973a279eec3b9f9846819
- SHA512 c00025ad4084a82792f636baaa58dc5806e56509558414b8c5a175403193899bc2fd9ef0f8fc513f18da7c29b25351bf37516965b611364610b685f7e7b4d0ef
- TLSH T1901152930CA6C089E6D994B9C1AB06F218E67E26A240E21971396A25515EE818BFA174
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-P99KYJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-P99KYJ.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://br-adobe.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-P99KYJ.lnk
- Size 2KB
- SHA256 e54237aa10321ecae09ed3f08e8c0d0fb81a9126a137078e79c0cef558c55231
- MD5 d5341eb2380864daf15b45766cfc2020
- SHA1 e0e1d0a65352798fbe4fb361d51182bff54207db
- SHA512 d8f97bb3b6d1a43d2099db9208389df8012f5865f326a6a4446965bb7f7186b8ec20d03208d137de4ce67f2252eb237cae360eb2e4342733b256bd2e334d981b
- TLSH T188417B803AE901E4F27B8E72EDFE274584BFB9616DB0C59D0C80C24C0822B04E977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.