General
- Target DOC-XBCD9Z.zip
- Size 582B
- Sample260804-j9gm3sar3s
- SHA256 562dd98dafde10ac14ab294dc17f19698bc50cf1269d49ba73122990e30ec8e2
- MD5 626ad9b8e1a930d077e4144eaef5042a
- SHA1 ea3b9d620693b28d26a89f2ac161c9830ee3bed2
- SHA512 36c8095f86808c497b28d045ddd2e0bea4d38c289b7495c66fcb2ede4ab26682eb757938d3392589a802c71bae502036e3152634af2687d6a034f71e23f50347
- TLSH T125F0E1B7C7885380C401B534C5207384414BAE61EFA89603CB6AF59928B54525F98D10
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XBCD9Z.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XBCD9Z.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-XBCD9Z.lnk
- Size 1KB
- SHA256 eb8be8868b3fed42e1204d8251f6b71fd5bbb75ba3aaff36a29f3c5e51098279
- MD5 8b1fee7b80ab60b35863902e6545d50f
- SHA1 0edad10488b02fe01550d4fc120918bc5e505455
- SHA512 36dda5fa873eeb4a6a43d0ad64645a190a45f010301da69c2b8ebd5d521bdf4eff9744c8de99d5e29282273a804a9f86f74974bc31a0f9af55c9acb386df0c96
- TLSH T1513197403FFE0628F3F38E7395BB572089BBB8569D20C62E4140464C5032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.