General
- Target DOC-YKBKKB.zip
- Size 917B
- Sample260804-j9gm3sar3t
- SHA256 db0848ff7a0f4f9fd8222b3151ba22383d063df825f7e3babaefec4b21ed109f
- MD5 1957ec1ecf7ff1e67b7f90d7989e3924
- SHA1 d0c108328b055b90d35e32b9f52bfa865863be0f
- SHA512 9a90a02ea218e6871dbff07f25a989f3483d60c22547c36ae57d7180ae8caebae176e425db395c0633abcae8a78a3f6dfec45ca9417349f95b9b6e94dcacc770
- TLSH T17A11B7399E544A2DC742C5F22661BC054312DCC5F745F202B6697852B78CD8B9DC1375
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YKBKKB.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YKBKKB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-YKBKKB.lnk
- Size 2KB
- SHA256 41466655d3e51416d9d912f7e42e625768e1854702b43200e07102888bae474f
- MD5 12d05be7b84da11fc8991cb001fb163c
- SHA1 062fbae6bcf0049899b8db9d496f308718eb97a5
- SHA512 630e43c67f0018e07b45ae33a83328c9e9c70044ac6092fdc91c14647f699ab390ee80dcdd03a1f065a61a7bcd9cf3f9c690f19992f60ea28b815b1f8c7b14c8
- TLSH T133415A543AE945D8F2FB8F73DDBA6715497BF9616D30C69D0441820E0826F00D972B33
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.