General
- Target DOC-WFZBWO.zip
- Size 586B
- Sample260804-j9hkdavena
- SHA256 ac853918bde4e2de10b9efe395fb43b7f1e224e563040a3f0688315367cc39e5
- MD5 c018d47cb9de5ea0f7e7e9a36ef62a72
- SHA1 4ebc68683581624e5c276f4b5b3c4f4ddfcc71ad
- SHA512 0f3a242dc7c6b40658212035b6f6b41b41bdbb70a9ad016c3bc419a3f1d009844582b388090e9c9fd2b51d5da380df77b915728b1439a8f095314fb2b13adb22
- TLSH T137F026B3979FC1EDC0519B336AF627F6945536221140074E2CACC009C8203E5E7434B4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WFZBWO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WFZBWO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-WFZBWO.lnk
- Size 1KB
- SHA256 f6ef1fa4e327682233d26412093ed82c4b3bc23740ac43c07badee19f1fdfd0a
- MD5 82f5bdaae9cab04523aaa7d7d4998ec7
- SHA1 0e2469a528ee97c4eb4020b1b2f5461645a9618f
- SHA512 bf9c6dd212aa1a57b8137f071623f8d06a083f1e28b15dc259c55aaf0bbef76a330e34204eec23f84634cf0f8400cbb757e536193429f49ab6312a0363d5436f
- TLSH T1F83197503FFD0624F3F38F7788BB572485BAB9968E20CA2E0041450C5022A15E13AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.