General
- Target DOC-CE9ZSI.zip
- Size 589B
- Sample260804-j9fqsavejh
- SHA256 7d95b7b8778d6273855995771be8580eaea8df6453ac53c2c5e5f11b4fa5fcf2
- MD5 7a0bfcd00fb49b3a848473bdf17b9a25
- SHA1 ef69dba68ffc5fee25f774e3d326393a3d86fb7b
- SHA512 d9481b282931b9322db9061436c317ef7abb5ef03e93d5f51f817f5e5ed2fb111d0c8737ad02fb12f6e2d67a1312815bf3c3f6cf2ba7bb4d1ccac1d2e8166cfb
- TLSH T133F0E16976A44A16CA62A472953B4B3A1B7408461F42194393FDC94E0578D50DF09936
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CE9ZSI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-CE9ZSI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-CE9ZSI.lnk
- Size 1KB
- SHA256 964361d9009df8a97f70390831bf29449eba8dca0a78b6b27973b565f273435e
- MD5 247bb0255627e62fa5116e70b776e4f0
- SHA1 a2d013b688b4c6455ea9c832dc1d5ec275aea9be
- SHA512 81e5092e692c654b7ffbc6ee52cb5b49e25e79217fdf724909c1ab9b8ac187c251ad98206695c7d0eeb653b878b2dc510bf77a00bf52db5f069df31e4be281ff
- TLSH T1F53147503FFD0664F3B38E7794BB572485BFB9568D20CA2E0141454C5432A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.