General
- Target DOC-WJ0XU8.zip
- Size 591B
- Sample260804-j9g9lsveme
- SHA256 f9a72ec7cc976a82d4867e983fb125ce8c7ff33b891fdc50cebb6277ef837338
- MD5 7bf51a240ac8a62b77544ffabd7a5362
- SHA1 c97d99db31901d3604c1c07441f8f57d9f5c6946
- SHA512 56d96fb94089718a18648b95b91456d9cd1f4cdb2cbe96ba4078d5013f26945b86923fd3dbfd9516eb92a9bcbc4ba9e46d35f5db33899bff08c42803c46dc999
- TLSH T191F041C3F23C5B52E1C2E43C6ABA4C8895D0B5A74A101A33B099D81445A50C47541038
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WJ0XU8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WJ0XU8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-WJ0XU8.lnk
- Size 1KB
- SHA256 6889d2361790b9f03dad1949ed78b5200dcdcf5ec9277f8ae8c389256ff11090
- MD5 2df9637c79d20bcbb737c7b26e907d0f
- SHA1 741b1ec8ac1ac349e5c4e341b57e73952b0a9a03
- SHA512 9778ce90985811dda93adbacc79f1d9bd5afe8b3a967dc12c7c4e32a26fac3e182a4a6f421b178037c7178826c1d8e81951327115f18b031c7c4d94d04e24dd1
- TLSH T1A83197103FED0624F3F38E7394BB572089BFB86A8D20CA2E0140460C5032A15E53AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.