General
- Target DOC-NZ0MCZ.zip
- Size 942B
- Sample260804-j9f2jsvelc
- SHA256 1347840c39e35ca091b23f1a9ff1a5e07fb4e35ee1183c50a330a37a545d678e
- MD5 2886868819d5238384ad5f1026715d61
- SHA1 15dcd7c25e6ee83a125d384b9dec1efdb2c64a34
- SHA512 0915cfef822d6499728e4f486255c3d7af4d1e3496789551925586481158f596f265f3f199379a461224a6de8c5151b3448e91656f3754f0a74aaf15f825980b
- TLSH T19E11888599478A5BE2D38B2D44713CC100B76561028BE11E34A67C554CA17CC2F8763E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NZ0MCZ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NZ0MCZ.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-NZ0MCZ.lnk
- Size 2KB
- SHA256 e67929adeae261acd12fb7439fa517dea49badf421464ef32e906ea32abe9d71
- MD5 9361a6f2f363d31fb27bd8913687298c
- SHA1 71e27ccb8af7ba3d259413c5712bdc9a5d6fe0ad
- SHA512 89bc35d0d334f105c1286a731466c27d23e8e148ce2e856376438df0881479c7cee1b0abd6b17a008184a568e39392e92f8b6c0b4eedbdb7a903d9b1ddf1d940
- TLSH T11D51E2902AEE00DCF2BB9F76EDBA7355487BB8915DA0C5DD4840810E4822B05E977B33
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.