General
- Target DOC-GFWE4Z.zip
- Size 924B
- Sample260804-j9gcbaar2v
- SHA256 0a31080bc20afbacad516f2d978eb5017161987c06227609043f433d17b98a29
- MD5 97adbbda70bc5f728b2cd716258422db
- SHA1 50f5c44d96eb37e30b60402f617a36138475e125
- SHA512 2369425ff581897e5d7a5a7972c51f7a2637a4e90350774d4c0dc186f79d40b478514f9f0f9f2e46648a294711b0b703d6885e69c211b51ec3089fe1d0894a81
- TLSH T18311840B4B6758A7C28AB633A43326B1EA67166D921ED101A48AD38F095E1EB0E00680
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GFWE4Z.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GFWE4Z.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-GFWE4Z.lnk
- Size 2KB
- SHA256 94f3c29cd7319753cec77a073b30e9f759e9fa0358e4bf43cf316f647426017d
- MD5 b932e91b1dd415acc6be38e5c577a518
- SHA1 a8d793b1306240eb886ca82520e5496079ac5b2c
- SHA512 c06058dbd997c60e8a593c84b3280fa90e84042117db7985b0b20383a269d64b2c0af0c6ed65f5cea7f7010e0347a5f40e11710a83330ccd4fb954c773331bbd
- TLSH T1834154803AE901E8F3BA8E76EDBE6B50497FB8656D30C58D0401C20D0522B01D933B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.