General
- Target DOC-CJXA02.zip
- Size 586B
- Sample260804-j9l8kazzcs
- SHA256 d1e95c4b207433b83e09f74a7dc9d7227440280838b3c809ad60573446a93935
- MD5 03c0b42f46ba790a575c722e3e47e135
- SHA1 3389dfec933af6e7a72d07134e51d051fd7e4d16
- SHA512 31a3ba02a3ba154170b888c79b7690412fc893c74363b32504fe55a54a7d55ae15207605df87ce7ddc425526cf3804088f7d1edeaff9bb147e0a6801d2eba2c0
- TLSH T188F026FA94F15890C0D6DCF531239231411E5C0D04E750F717E1C04D6A9F9E154B4935
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CJXA02.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-CJXA02.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-CJXA02.lnk
- Size 1KB
- SHA256 4dc1d4716ba3de3e4c3c95475ffb55123b20ab2a5fb514d8a16ab6c7cbaeb5af
- MD5 c0c86e97b7c32c4250c2d1d56684336e
- SHA1 50db8967ffb5a5fea6e19b17d16a3f29c91e769c
- SHA512 4189a68f75351f4b976399a03e889064c02d0835c46c6fbc99ef072d5b604560932c232f4e7d5abd7820741bbac9b675e7fa8853378a17c4e6acaf81a7a21c84
- TLSH T1883197502FFC0624F3F38F7A84BB572085BBB8968E20CA2E4040450C1026A15F17BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.