General
- Target DOC-2BJXPM.zip
- Size 839B
- Sample260804-j8tw1sga58
- SHA256 b1ec577b0861d91ae3bba3bb01430fd086ce62710e7377f1612e0962a63bfc85
- MD5 9387c5ded13650ec5afbff447b09353a
- SHA1 4d99c4d7f76af402d52fe131ae593de2750fb687
- SHA512 7006f7fb50b8ccb98fb06e31a173de65503a27b014dfaff5f8e23a81dd7cfe3ad6ec1b34cdc0b1bbc46e7191857c13c2c1e6162fb7d51bf5903b71a3da23bc4d
- TLSH T15E0186E342A9D128D9AA40F89F89FA707578204432DADC2C4DB4F92400436F03F4A935
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2BJXPM.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2BJXPM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-2BJXPM.lnk
- Size 2KB
- SHA256 657cfc8487d056db94bf00cdab6e96c27c487031c95a5d1f835536256cb8bb27
- MD5 a85e8d8ea44a6493efdd85b6a7cb71a9
- SHA1 b81eb726d75417a022a9f24cc1fff919d9c3dd59
- SHA512 a2ebbff22953a0827adf203d87de8f400a6e5269082f8155b8287edd682d80b4c92a0f127bf95bcc51c985eef1d67a90ae26820a65a0b702c5ce4da1105c5ba0
- TLSH T1874167502AEA01E4F2BF4E36EDFE7751447BBD919D60C98E0850814C0832B01E277B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.