General
- Target DOC-JZ7FG9.zip
- Size 586B
- Sample260804-j9gcbavelh
- SHA256 cf691cfd81515fe17aca12b17964cc67ffb3e1104a24181affb1f0058766dd6d
- MD5 f2b6816521a2455e79626240ec1d7c77
- SHA1 ed7c9ffa73e5689a6d94e69d07afb5ed0ac3626b
- SHA512 e5eb1d2156202a96d8265bb9b2891e1ed6f00f32a0e634067c7cae1e1859de0d0344f0304ba45006368b8b7c0c7b020b99e85176a8f34f8d47ba049f32507168
- TLSH T185F0E17943201863D645E3743C775E961120D6E5251C29735772F61BC9267224AD131A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JZ7FG9.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JZ7FG9.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JZ7FG9.lnk
- Size 1KB
- SHA256 6ba771ff5dbb5b74fdd402035fd1d9100fd812827bfdfda7f841e918d323fa66
- MD5 2de82240ac5ac9d7f392f05e955b54ee
- SHA1 69822b40faf067f36c6420011f758bc99edd71cd
- SHA512 4dc4230688821584f5fdb234282072188f89683ff09266991aa32c6d19e2b1edca714336adc42754cec15b5be51598657c5bdb96a8c43b5c5816e8a13a9b2d9a
- TLSH T11731CB003FFC0624F3F38F7398BB572089BBB9558D20C62D0040460C5032A16E53AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.