General
- Target DOC-3IBQGZ.zip
- Size 589B
- Sample260804-j8tk9avdqb
- SHA256 3cb6215c04f85e7926c4ddb4dea8b115b81ea905ace55d886387f51770b4f2fe
- MD5 bb0ad841a16f43b378b7385e6edd5b35
- SHA1 21c953b3bb43837cf0ae94ea5d482e6f93ae65cd
- SHA512 190c62e10750a94f77af5152aff136451795047fbe3613c9176cf2a3992afc821179cc4100ba6875437f35c788f3f1d07d652d55ab8e7de6e5f6194ccc61ec28
- TLSH T1CBF041635688444AEF4EA07CE6754903C762309E125D1226392E8D08DB5C1FB6F8B420
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3IBQGZ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3IBQGZ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-3IBQGZ.lnk
- Size 1KB
- SHA256 e0b8118999047c5bf778cc10b9871cc689da69282ebd918e77d26f6062e9db1e
- MD5 2f5254d2585103a0d17cbdfba03c425d
- SHA1 7faed5861bcd20016aed22eb55239451a36686af
- SHA512 21ee1088b089689c9fba0ab75ce14a2b301a17de34ec7b6ead2ab6bafedf35b5e0fcb3ff7eaeabe90373fa6f2d05a61b7db80a84a153ba15b7f388859406f649
- TLSH T1A83147503FFD0624F3F38F7799BB572485BAB8958D24CA2E0141464C5032A15E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.