General
- Target DOC-SZKY4Y.zip
- Size 586B
- Sample260804-j8sc7aga38
- SHA256 eabd21a89774c10614668df86af79286640e321fbb56fcbbd57d6b8f0473637c
- MD5 7dbf3e79313ae53449ec8df0b1668997
- SHA1 50b2062d314ce6d2238b7962821e66c312f204fc
- SHA512 82445a2d386622ed1bbebfd2f10af3b08239286abc93d6dd377e6a355b5e6231b477a93514be8355b209c9348cea28a7a02b994e9eaa362fcbceba0f6efeba64
- TLSH T105F0416F8470C114C285C07B751163E216E406C6B40E012AB3A658A74833AB14A92873
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SZKY4Y.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-SZKY4Y.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-SZKY4Y.lnk
- Size 1KB
- SHA256 544b12e40573f258089b2390246789a8f4acc327535f061ca52b44b964b44d3d
- MD5 dabba66ca83bcbf999e393f4e992540e
- SHA1 45ee880a35e59a2550307b2dbbdd4be8e7c61d63
- SHA512 b2191c10d2dbaf9c529313d4864be620ddc0ec60e4f14c716e9be6d9a18199d0bdfdf53ca36f6d12ac85df7e676f0733d3d9ee8ddbb6b0a0faa8534157b69540
- TLSH T1ED317B507FFD0624F3F78F7798BB572489BBB9558D24C62E0141454C5032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.