General
- Target DOC-HKFG0D.zip
- Size 583B
- Sample260804-j8tw1sga63
- SHA256 3c8a00f472fa4d7e9c3e8230b340473298b96226771068c56127e204fadbcc8e
- MD5 40cbbc4b35dfad4d3f0b9b4b03b273a3
- SHA1 395bc46ab6fe9c2a826aed614dc98eba56e69061
- SHA512 68c3023928ba47844b26118ff594cbdb737ecc6250916f927620794d8ea3c6e30cd5a4c44b79c1959a67cbc05ef40be0c9379430ae2c173677e87345e494f43c
- TLSH T1E8F0264E892ED084F117B034D09386327E07C08E0986674389ECF64E1F71142DE5C712
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HKFG0D.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HKFG0D.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-HKFG0D.lnk
- Size 1KB
- SHA256 fcffecf29fd6c9ceeb750091d560b97a359b6d69e8eab2a90e83bd9d12e28aa3
- MD5 ffdf6ebfcfe249a73edcb1314721943a
- SHA1 8f3ab8c3abd6c2f04467cccc6e380d80595c749b
- SHA512 b05339fde0746848f6e06ea115e4a39b6bb2ee12dd802e0d49e42c4589d69a2cc217d296f87749746011f57dcc27c7b048ac53a00086f14e0249d6d662f27641
- TLSH T1933197002FED0A28F3B38E7688BB672489BAB9658E20CA2E4140450C1432A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.