General
- Target DOC-JJGRHM.zip
- Size 580B
- Sample260804-j8vtbaga75
- SHA256 a02294e5624473158b7a3020e97bfe271a0d9e328474bf3034405c34aa6faaaf
- MD5 f321d78a489a9c7b978c524c2a5f3b7b
- SHA1 b2a7a014a1cb805feb387562eff5eb20dc64367a
- SHA512 0899d0e8277a8c19d8c7ae71207f118adcb46e8385cfdadee63cc4688c7fd8be29e4abc1612f9df9e8c1fc969e1cc3b43082193090d864d3f8f66f782be58724
- TLSH T1DDF00C17AA0CC900C31596B93447015222E4C0C1D3DE22652620EB5934205F00E2DC1A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JJGRHM.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JJGRHM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JJGRHM.lnk
- Size 1KB
- SHA256 de9abfb2717d647656b65788820685b4e788f4a19633d484c9e14fc4b6625511
- MD5 a8cb9440d4f21da083de852ef131f2c5
- SHA1 0e37eb01ff191c5e28f5033671c10145a12ee4ac
- SHA512 296b21cf31d400e74e58e6234779b8453ca5dde6a7a106468cbb84d4bb4298adb54ecd5bb28fe7187878a448191c3f9afbf62da03bf151feddb381dfc565ea5e
- TLSH T1BB3124503FED0664F2F38E7794BB572485BEB8AA8D20CA2D4181464C5022A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.