General
- Target DOC-ZZDXHI.lnk
- Size 2KB
- Sample260803-wer7jsgn51
- SHA256 57e9791a400e81a2d04ab9a0fd8d3f93eed6c06fe8bfb668b15d94c62214cdd6
- MD5 c2b48d7ca165d25dbfa82c05f79bc49b
- SHA1 c8d78741b3c369c61eeb069a4e8617078c68df45
- SHA512 d24bf5f20c82a478ff61e5fa64a34bcd9d8ba197eb66d4d7c115494ab593048859e368e9401f8f8a8ae6cdb944c20d795d9552f6e5c452f5fdd371112d2c014d
- TLSH T1E54197502ADD41D8F3BB4E72EDBE371949BBB9468E70C6AE0840800C4422B05D537BA6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZZDXHI.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-ZZDXHI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZZDXHI.lnk
- Size 2KB
- SHA256 57e9791a400e81a2d04ab9a0fd8d3f93eed6c06fe8bfb668b15d94c62214cdd6
- MD5 c2b48d7ca165d25dbfa82c05f79bc49b
- SHA1 c8d78741b3c369c61eeb069a4e8617078c68df45
- SHA512 d24bf5f20c82a478ff61e5fa64a34bcd9d8ba197eb66d4d7c115494ab593048859e368e9401f8f8a8ae6cdb944c20d795d9552f6e5c452f5fdd371112d2c014d
- TLSH T1E54197502ADD41D8F3BB4E72EDBE371949BBB9468E70C6AE0840800C4422B05D537BA6
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.