General
- Target DOC-QWJ1OY.zip
- Size 953B
- Sample260804-j8tagsga52
- SHA256 69cac436129c5724460f38f27394c95ce4cf24c74cba02b640f51a8a7ef543e0
- MD5 5b1537da4e29f52897216e2757794c98
- SHA1 15c18bbb0472f4e2f2e39f9b728e632a2230e874
- SHA512 a1e303cdd7e905a100e6a9c7e24ee56a27f407023c6931a5d2ea892cc5d0b7c40534410318a6a8e2b29299fd691351da6907420580546b48990961cce2b5713b
- TLSH T1911184BA7E664088E5F0843944A35A0E22FE8C26AA58EE27502CBA6A459D1401209DFF
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QWJ1OY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QWJ1OY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-QWJ1OY.lnk
- Size 2KB
- SHA256 63da7ff704ef48aea8f40809001889ea4351ef9ad9cbfff42c4cc2d333659fb4
- MD5 e10323c12aaeeb52ae5ddbbc84fb337e
- SHA1 31d46d6fe0746faa18934bd4304decfe9e833404
- SHA512 dceb45bb2bb633d1b4d95d8de4309715ce228943eed9303cbd446f53a2cdd010269a1fc53f52e273ce7a1ae64480bfd53d3845ce01badaece863661e658aec97
- TLSH T1914147403AED0598F3BF8E76DDFE678049BFB912AE20C58D0940814C5826B46E937B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.