General
- Target DOC-Q9Y7GJ.zip
- Size 964B
- Sample260804-j9g9lsvemf
- SHA256 717594ffa0822baff656b4d8d068746ab2827e8dca6ef4091361e0da0cdda953
- MD5 d49436ac655fb93f01996fea63a30562
- SHA1 e8f80c9167af9c49490532cacbb3e3cc5952595e
- SHA512 56ce831bd9e9a192e0c4e337a514001d79908a2e5cd2ca0ab4a141836a64cc6287f9d738e5a91e47f727168989dcc4aef648fb23ae986c3e26b4b840622f768e
- TLSH T11611C836ED150F15D19EC3BD4CF333091C95806DCA4AFE92B223A8C815A9655BA3772B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Q9Y7GJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Q9Y7GJ.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-Q9Y7GJ.lnk
- Size 2KB
- SHA256 cfe18f107cccbf0cd76ee2c6ae9f887aae0ddd2e6f99afd2a9e4525b7318124f
- MD5 f8c78686ae83774d1ccc8da96bc6058b
- SHA1 1881415e7c2c2df77adfd2ff73304bc63a997845
- SHA512 04fe04971ea2926668b6ce0cbc8e9871f67dfbf1cf89362f167306b3aa0da1cf86d46f5d7bf07acea684c679a4cf048c5011bc2ba4f693a1890912b1aca7b34e
- TLSH T1E34169A02EEA01A8F2FF9E72DDBE67504977F8545D24D18D0850814E0833B45D972B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.