General
- Target DOC-PJOGDQ.zip
- Size 884B
- Sample260804-j98fsszzdv
- SHA256 c683e3d86b45f32c4e1912f899219a4f1f701fc4e2a0a1e5227cb67c49596ae8
- MD5 2cea1b2b392c273fdca0e0ba0c9ae683
- SHA1 ac93c3fc9bb5795cc2a20435d42f94e69af06e79
- SHA512 2b473e44c68f2eda297660e17b9e54ba0244d01ab23b89fc9e16242a19fcb86746fada0c985c6d4f2c3589680b62b37540e6236e694781b187ac3ac05d3c1320
- TLSH T1911192C88A9E00EAC327E3B83864AC07D497862C039E6A4260EAA5021D97D8CAE86440
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PJOGDQ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PJOGDQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-PJOGDQ.lnk
- Size 2KB
- SHA256 880002b389456e08f42ffb79236ecdd474b497c0732440769394774ada3dfcf0
- MD5 49ad556009aab0bbe32783b9dd887097
- SHA1 e7b2df8089fbbbc6abbb735afdf500cac3810dc8
- SHA512 1f7962ed6886d0551ace26abb680c186a17f5f46b8b18d45dc3a295d732fdcf6d20cd9a53d826c302c0b80ad7ce679d89d804ef62cda84ff608e1c965ad4911f
- TLSH T1C74102942BEA45D4F2BA9E32EDFE2B5144BBBA519EA4D69D0940C00C4422701D177B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.