General
- Target DOC-GZ9QYF.zip
- Size 591B
- Sample260804-j9nrdsga85
- SHA256 e5f8119319dd254ce0e193cf55587655a61e6023239f353f5525e0d6fb7100b8
- MD5 f22090c37cfc4873db1cf7e4d62a874c
- SHA1 5d4d9ad9872d9ec5fa3cbd5b3a3783a621c53941
- SHA512 709e4d4ec8ef71b10575e430911b248b40da9bd7cc84effd09e1bc50f22680f8ae11d08f914b9e345f144c1ff2aee64565f7e4c26240452aeedcf088446fbaa7
- TLSH T150F041067905A068FE9DC3BA8ABA30254B24E2E20A5FC8027A502041ECDC4E80EC9AF1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GZ9QYF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GZ9QYF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-GZ9QYF.lnk
- Size 1KB
- SHA256 7e23a3d7f834866e10bc1b981bdbcdc22e12922f1fb53edf371186a98d5d4ced
- MD5 10a819d000343572cd9ffc5218964c5e
- SHA1 52ee06ba68af101d777683c272ef4933b528e069
- SHA512 bb2b7336f9e6bcc94603bdb369d276cbc030234730e20d60a22efeff0fbdc0b720c206942fb647715f9adb541403f536c1e6b73f5f6270ff7913b04ef0bf5c23
- TLSH T10E3197002FFC0664F3F39F7384BB5B2089BBB9958E20CA2E0142460C5032A15E13BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.