General
- Target DOC-1ZTA8O.lnk
- Size 2KB
- Sample260803-vb54katcmg
- SHA256 2068ea22d686b822ee8f084176bfbfde9eb5c234b6e9b6e403881e61318dae11
- MD5 79c19234ee1e37ea60401bfcbb8d0156
- SHA1 77c707bb72998ba5a112e4daade5e4c2e1bb3c31
- SHA512 69a475b9fa153a8f409f7f09368882f8931ae698f43fb71553b32d032573584cd4d9a9b8b3ee6f503fcbae2a6b0ef4c2eddbc38445c223a64812be031cb8e8f8
- TLSH T1C75126803AED15D8F2BB8F72EEFA679049BBFA626D20D68D0450810D4521F45D977B23
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1ZTA8O.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-1ZTA8O.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-1ZTA8O.lnk
- Size 2KB
- SHA256 2068ea22d686b822ee8f084176bfbfde9eb5c234b6e9b6e403881e61318dae11
- MD5 79c19234ee1e37ea60401bfcbb8d0156
- SHA1 77c707bb72998ba5a112e4daade5e4c2e1bb3c31
- SHA512 69a475b9fa153a8f409f7f09368882f8931ae698f43fb71553b32d032573584cd4d9a9b8b3ee6f503fcbae2a6b0ef4c2eddbc38445c223a64812be031cb8e8f8
- TLSH T1C75126803AED15D8F2BB8F72EEFA679049BBFA626D20D68D0450810D4521F45D977B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.