General
- Target DOC-ZZNMJM.lnk
- Size 1KB
- Sample260803-wen5wsxtev
- SHA256 64b4a9f8d2ed226f49147953ae80f8005f8115f1dfecead3220c8ff0caaa6b90
- MD5 70108c9b263f5dca352598a900f29b41
- SHA1 c9c9bdf0fd89ee7661a20f6201d40918c040fc0e
- SHA512 edef5346200f800d8b5105367d6eecc1f2d2a08ff18824198e10ebefdd155420f0e57328b0a460c457e40b7d1d323ad340eec7f563983c39ba0ba3b739fb7b60
- TLSH T1ED31CB403FFC0624F3F39F7384BB5B2485BBB8AA8E20C62E0040490C5432A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZZNMJM.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-ZZNMJM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZZNMJM.lnk
- Size 1KB
- SHA256 64b4a9f8d2ed226f49147953ae80f8005f8115f1dfecead3220c8ff0caaa6b90
- MD5 70108c9b263f5dca352598a900f29b41
- SHA1 c9c9bdf0fd89ee7661a20f6201d40918c040fc0e
- SHA512 edef5346200f800d8b5105367d6eecc1f2d2a08ff18824198e10ebefdd155420f0e57328b0a460c457e40b7d1d323ad340eec7f563983c39ba0ba3b739fb7b60
- TLSH T1ED31CB403FFC0624F3F39F7384BB5B2485BBB8AA8E20C62E0040490C5432A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.