General
- Target DOC-KI69H3.zip
- Size 594B
- Sample260804-j9gcbavelf
- SHA256 4ba31f0a6b6367c6ead6619a9a050e9f4cba178f51e76c00c31aeec35cb702f9
- MD5 a6c401d7590cc907ebe7e0139b3c632d
- SHA1 f9aee5782a2470843d20c448cd31a58a275d69b2
- SHA512 851e859068550a47258343e10864815deab7fcd1a8fcb68a3ad98e97bef9684ee43b9a1307a9da58083d5bf921927d1c22ac3863b9a808756e2bd5147851c4bb
- TLSH T14EF0E1EA08438912E457EDF070167696566BA6934102AF8BF318EC9B66585E15D42870
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KI69H3.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-KI69H3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-KI69H3.lnk
- Size 1KB
- SHA256 a3dc3de22d8c86ff3c47069abf0804f9e08dab1a5de717cc5d2d0e9a2e558244
- MD5 293b31729c93f72125b74dd6dc249c01
- SHA1 b5c332d7f9eabd67ecb2833e195c37fc5e4ae497
- SHA512 0b3730cfed0e924c30c6f67f84f7dda163ab545156a529f5cf72b5b2b105e2b08dae4a2092b0f5e9f6524588a58df165005cb7b667ccd8904a333d33b299ca30
- TLSH T17A3197403FFE0664F3B78E7394BB5B2085BEB8658D21C62D4080460C5433A16E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.