General
- Target DOC-IJFF2N.zip
- Size 591B
- Sample260804-j9nrdsga86
- SHA256 49790aff5900ef180db1dfc5242a756f8a4020936a937105fe323340c7661c8e
- MD5 f5c9a2d6a850f5490903da2b59eb4d1f
- SHA1 d149fb0ca67b869efdec7fdb33e8e58fa0844a2d
- SHA512 bfc123d66ceba82602c15c3a20ed7c16f5498d5a322edf5ece9b9a283393106717e1f7937ee6334560f1e491ff8e23c3671fe70cf857f689c439bfee7f24fe54
- TLSH T1A8F0E179B14A0D0BDB0247774C1E9EA4C0403889268E1ADB6E69D669CD604D338FB1C9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IJFF2N.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IJFF2N.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-IJFF2N.lnk
- Size 1KB
- SHA256 2b3f7064c160cd1545893ad96e6d98b400b91a5b90ee138511790af57c094c4d
- MD5 e4f02405642ec9a63c2ec5c88346468c
- SHA1 c8e20d2fba5770fb91124dd13d6e9ec62b23869b
- SHA512 33886c6e260893cf91f3eb328b75d00c1b1bfbc6509f464053436bb375714cafa16322859e40154c0ffdcb49e6414c2c52ad405bbaad4cd7e194a2392aa904e3
- TLSH T13F3197103FFC0624F3B78EB388BB9B2085BFB9598D20C62E4041450C1072A15E13AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.