General
- Target DOC-CKYMTF.zip
- Size 585B
- Sample260804-j9hkdaar31
- SHA256 5ce06f118907230351f50a1c508ba3a4591b1c1b1e542245fed6f6fa0601ee1d
- MD5 f156e714dc134544838e54b3a75f0c54
- SHA1 b66202c08d2219125e94a45e4f950ac30740ca65
- SHA512 8d5784fd44d04586bf286fd879469135cfa7fb5aa9da77f7441af77768029451a551f470163662f8ab9b475126f03dfdf017e92f8b2e0f4dc83382cd1b6b19f0
- TLSH T116F041E78D9F0076C024EC74C1BB7A36C7D826E533A70B3A91C2C0901E7048B4E84920
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CKYMTF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-CKYMTF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-CKYMTF.lnk
- Size 1KB
- SHA256 3b1f91987aec1cad1c597308844cbb672b467b274e7ee6743cd345858af5c2c6
- MD5 f6ca6ccc328e0fe68114bdbb25bca0a5
- SHA1 0757d08655a4ccb6a426f811114eda2b3c12812e
- SHA512 ffbfe78f29b4fecd3991f0dcb84578ddb5bc57ddf644bfea2d106e1632b56c0d02b36f4f5885093606499f8c3c37697ffa8611998995041a8fc7b6d9d7a523b8
- TLSH T10A31CB543FEC0A24F3F39F7784BB672089BFB9A68E20CA2D0140450C1032A15E53AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.