General
- Target DOC-AFOJ65.zip
- Size 998B
- Sample260804-j9752azzc1
- SHA256 b1b261b7828f31781b60b7e47af5096e34cbe25dc817ecd7ef8c95210ec940c0
- MD5 f34761e753bfd9877ea343f301f37bdf
- SHA1 a6c0fa1b6bd57698e8941a39b182777ecfe9c73a
- SHA512 b16b0203ac24752c9cd17288b9d36907aba4bacb383961077060fc33d65f1d608fdf2fadc9c64a9b2ed386fd74c3594398bfb77b8b3eb5e9fac641d7b76c67e8
- TLSH T13D11C49592D80F83CA0DC8F58B70E53F6D8CBA0838403C8A11EA9B1D35130E9AF0E230
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-AFOJ65.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-AFOJ65.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-AFOJ65.lnk
- Size 2KB
- SHA256 f3088c6226554e58d07f4122fd3820b8cff2438f47ed73282991f8d5bfb2523d
- MD5 95aa57335d266ac26f3ca22334eac197
- SHA1 435f77ebe9f328e47541d6e3b991dc1c054bc922
- SHA512 e497f5ed0c21e5815507a2ed2b32e4dd38e729cc70010b3c055c319c903a462f3a5861ce2d62717dfde640876a88436a275de7989b33b245307bb57808b57ce5
- TLSH T16D5147902AED019CF2FB8E729DBE67550C7BB8A26D30C59C0811810D1422F00E9B3B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.