General
- Target DOC-R4J5JX.zip
- Size 940B
- Sample260804-j9hkdavemg
- SHA256 b0dddee303ad01868f5c7e8f68d6199515814a3e5909d930e6df7c679663d25c
- MD5 abf75219c2b3461255dc70198426c0ad
- SHA1 f98e89d786762caf0eed92ff8ca31fcce08f4570
- SHA512 98b8816296d871d770f0935e5a16ad8adbe22c01a5d3498f9e58c2a67486956a66082e5896fee716d4e93cf1f77ba5beffc4e11922458fd55343a67147d0b6c6
- TLSH T1A11167E3CC7CA841DC79E2FE1C153D44E0184E793C6538E63534AC430C55B65DD2C286
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-R4J5JX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-R4J5JX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-R4J5JX.lnk
- Size 2KB
- SHA256 1b610e42a87926e507a4f276103116310c0a2d759cca60a7e001a712e44bdb56
- MD5 31da9a95db0ae904228d5cce8a9c0457
- SHA1 ed8fd42f312f3624828031e7aa1ac1a41116cccc
- SHA512 9e43195709be4c57bb49617d248623ac14d724265ddc76c96c91afbe25311721e8ebef0e704e82162756d4d41df1e5ba983d2e1910e33fb228664fd641f4d57f
- TLSH T1E5415B942EEA01C8F2FF4F71EDFE675049BBB8505C65C5AC0950810C5922B44D4B7BB3
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.