General
- Target DOC-IBE3NJ.zip
- Size 944B
- Sample260804-kabs8azzez
- SHA256 f2180bafdf647f69a6b9705f782f2d9a63787638d0617f225725ce13b5dd0ae6
- MD5 0b53f42b92e23efeb00756e851036a9c
- SHA1 11ac546896d94e94e68d045c54cc67014b9e29c4
- SHA512 54fdbc161f8d5be75453987afae3fda1f652e7cfb05025820d8cf08bb4d008c33bca4387c41cb133340e477ba61328ae272d2944dbec5aa223d3f9c91a8841da
- TLSH T1D211FBFCC6349540C4DBF2BC90CF2561D50ACE013381A8C550F24600AE9C2903774A0C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IBE3NJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IBE3NJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-IBE3NJ.lnk
- Size 2KB
- SHA256 7eb6c7410ba7778c10c366218e1bb922b88a156229051198036dc5795db9c78f
- MD5 7be358a8110e066bd437843c06380681
- SHA1 f29a76a5642cbeeff25fae5bf4eeb138a75d0889
- SHA512 4afcb1aa44b1d9eb24bb46ed5182d4cd9b7a684b20f58607964c211ddd18e13edeff25f60799ffc0ca1f335c8d74f5cf9877d8fcba6650497cf75519acd55f1c
- TLSH T1554159803AE805D9F2FBAE76EEBE77614977B9A16D70C6CE0800814C0921B04D977B37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.