General
- Target DOC-2KYY4X.zip
- Size 874B
- Sample260804-j9gm3sar3v
- SHA256 ff7ee32a87db9cc132de24bd98258c9491974b204ab3ba07be542bf88bb161f6
- MD5 ddbef83380a2329531c94ee6d522ac3f
- SHA1 ff5c16aaf81aa655ae91b8ff22de5ceabbf2f822
- SHA512 5082a153e1207a7c2ea3242e7b26ae968dd15b8b033107fbcf2ecf7b44bb08d86a821e83fdd2aba8883fa04f26d7286acd8d194308f8e4f09d128ac0bcb2951a
- TLSH T129116313070A89A1EE539FB858040C4E8009F1F8C40EE31B505D5B3219DA1AA8BCCC66
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2KYY4X.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2KYY4X.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-2KYY4X.lnk
- Size 2KB
- SHA256 c5efaf97d6ba53772b4b69a3097be5d35f75cbcaf9d4baf3987a2fa49383d3c3
- MD5 42d09236f149fc240961a230918e2567
- SHA1 b1d49a00dca31a7f329605ef0214ead1c572c7c0
- SHA512 e861de0a1416d36227951ed35e1fbb3b25d95eb291a3764a36ff74eae59cf5f4069f3d001be74ae8a5a611311e67c9e9964f492ae83ba500f223feea0628271d
- TLSH T1924148502EEE00D8F3BB8E72ECFE6B51547BB9616DB4D68D0891810C0422B59E537B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.