General
- Target DOC-Y7JWKT.zip
- Size 898B
- Sample260804-j8tk9avdqd
- SHA256 68bd8c4bfa69124996f9929a6b963c457def64910f5eba85a144a3614fa7fe49
- MD5 8fa48bc07ea0725982a29f4c627f2019
- SHA1 62537df282ca6cd30f137c164e79f6e10abb5650
- SHA512 f51f7eb1b48721d42853521ba6b86771138466c62c48b0c47655b7704ab5417bd19479cfef2a73e4fc9bd68364a04015c381518aacbfc02bb41ce5869ec721f2
- TLSH T14D1163539782CA09FD7101F8903BAE558574A6CED48239C97822FC1E7D724822B98002
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y7JWKT.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Y7JWKT.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-Y7JWKT.lnk
- Size 2KB
- SHA256 84fdd5ba8a309163a50ffc362d4109af43636e77799b148efb3e2c44f0f5697c
- MD5 5cdbf74266cc5a7084e3f3f60597684a
- SHA1 32ab8156551fe0f48ee115c04558ced448f66955
- SHA512 9af79700f95679e8d0bd960b865f52207e89671500efda04321686a8049344b670bbb07105432435d7811e7f63d8a8a116e29aa7bb524d0959d8a2c35ab97f75
- TLSH T1294143803AED4098F2BA4F76DDFE6751887BBC615D31C55D0900824C0822F05E977B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.