General
- Target DOC-9JKRDV.zip
- Size 846B
- Sample260804-j8tagsvdph
- SHA256 3c4dc10de384fae1b15809e7552672e7d912dbec4c52f91d3c6d597f9e08e992
- MD5 d405d915dd0158ff7d1ace474d869c41
- SHA1 2736a65b1e5d1f7af58039819cb9a7d4ef4faf06
- SHA512 43ff7c3055c5462d015700b76c4119a60a58a5f9c1c484944745e4a9884e0dcf0659338e01c7a9c63ccb130a8c7e78815f2e5458725445c98422d703bd02f79c
- TLSH T1A20152ABAB018101D29FE0B299882708D7BD192852110E26247B9D6B552919AC9F89EC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9JKRDV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9JKRDV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9JKRDV.lnk
- Size 2KB
- SHA256 159be4ef2a6bae58c4a0f117f1af6cf99cf45df9b188c4419f8e0e103c6e8d1b
- MD5 189aece54c64b404870f12dcf25f4489
- SHA1 786acec8500daed34d9a2f145e7797a42ba27c57
- SHA512 4bf12de2cb0dbfe8384ab0e8667d1815aaee19acc8ab1bf549903ffd83f9968a1a15bc96110fb1dda7c79cb2e66ae1283993fb82284ddf9f12a882521cf3f2a2
- TLSH T1E04125402AE901E8F2BB9F77D8BF27104DBBBC612E20C65D0850820E5526F42E977B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.