General
- Target DOC-WJS97S.zip
- Size 890B
- Sample260804-j9kpqsga78
- SHA256 457b75db7d2c2c24e74810ac1eb00da2a8d398486e57b87c9114cfa98f89cbec
- MD5 e02ff2875e844d2476f4095e8862196f
- SHA1 cbbca5f7cc7d8fb01fcde439136a9789c1e17bb1
- SHA512 efc19c2cb7f4e322b5f400969a8b03a575355e5fc26f2c004450b90b37884b6b65afc23a04a5894d67947739965d4f5d7e72fdfc08c91f809f5a1fe2950b09f8
- TLSH T1B511675D52EEBB4DD71BC9B5170241A1AC1BE5D023616056129CD44578EDB44038814F
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WJS97S.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WJS97S.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-WJS97S.lnk
- Size 2KB
- SHA256 962a7f854263316dece95dd3033a0f9e1f672af82cbf9e929e053e5330d85915
- MD5 746d4aa2f1105279ff4eb9fe9f4d64f9
- SHA1 f427ef39332d92a5a67fd98ef55864a0e9e4c312
- SHA512 c4210005cab6e4d79d3781446606460cb477116db2d0a6a1caebcdb867b14bd38dbffed8ada8114bd637ab6d25ccd8c1da03dde87b07d622f59c723d49f0cf34
- TLSH T19D4149802AEE41D8F2FB4E72EDFE67214A7BBAA14DA0C59D0950C10C0422B00E537B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.