General
- Target DOC-JCS13X.zip
- Size 905B
- Sample260804-j8snysga43
- SHA256 5c6ff64d268f24b7c01650e893077adb58003c29c570cd9d34ee40c226f353af
- MD5 fbaf470c09a99e02aa287e300d0f4d73
- SHA1 5cdd5a5506c9a85403dd12890ce21a13664536b0
- SHA512 fb53f04ae3b56a89d785d70de26d0a0bea3316ddf7bc79c6690a176e4a5e22c01be1bd23a00b258ba551c1cf04ce75a50e4d8400b81f735fb3256a891c8716a7
- TLSH T1DD116772C44611C6D1F9F2F92B63B2D190230C525F8D66C64A2D48A117D60D8FB813DB
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JCS13X.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JCS13X.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JCS13X.lnk
- Size 2KB
- SHA256 01acab1099348f10345d45bc2dd4ee9ab0618ebf310d4bb03db11358bedc6d1f
- MD5 61f2dceaf874546736e22877a3f63751
- SHA1 12475c282eb05b459418a62b7d9f64578bd82dd1
- SHA512 5afa974a962eceb4e15137de72c16ad42f4ab9cf07fdd25fc07f37e0946d43de0ab6302178bdfb78984d5c2d172d8be71b8c9b68ab59bfed2339c5b420e4cf01
- TLSH T16D4104943EEA0598F3FA9E72EEFE275085BBBC515CA0C58E0800824D5432B05E1B7B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.