General
- Target DOC-JXOZYY.zip
- Size 910B
- Sample260804-j8t7savdrc
- SHA256 5221e03c48ad81e3056ca817e5e5511e77946cb4b1bb4da059c191b436d334b5
- MD5 5a5644276a6d4649d308cb07c4d26476
- SHA1 dbae604889a2bc2d3d1884a381d4a70e80285536
- SHA512 2b46e4da64a089b16206c3a096ef22103f4dc9ec25ca16a5f21b75a0abc74fc973449cbd35207c8f0e0ca151d84a0da40f453cce502e47a6cf3efba349ba00d9
- TLSH T1C41163E6DB62E8D6DCF8C0B111237C469B67D0850088C363D4CA238E3CB672D4B06B02
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JXOZYY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JXOZYY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JXOZYY.lnk
- Size 2KB
- SHA256 74c23152cd37d80760e9acea61f919310dd2a82d584580c65a2ec334723998a1
- MD5 5ede6d19efed03b68b844ce876fb50d9
- SHA1 879af25e1598590459e23a48a46fcf031629c899
- SHA512 1f700b35b60c6e0c43822b8d6968d9ded4ac82fa21fde0b2f5ec0eb34c7fd1f3b9ddacad0cfcc956fe611c5f8970ea1d47b2d6f3725031e24310bb676cda2a6f
- TLSH T1EE4155847BF90198F2BB9E36EDBE374149BBB9615D70C55E0812820E1932F04D9B3B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.