General
- Target DOC-J2ZS00.zip
- Size 592B
- Sample260804-kacqhszzfw
- SHA256 0062b8494c046f6182a0b8801d6f4a67a39cc1791ef7e2f3a3b714524d4b5e18
- MD5 167bad40f8360bd5c296b2368aef60d1
- SHA1 9186b21942326a188a997fd696e188bde1473f69
- SHA512 be106c1ae73072c08983407ac168314670cf658d43a05ea63980f610dfcd2901552b4ae5a4d538f8d552012b32de581c47c4468c20a19f101514f0e2bb8a40af
- TLSH T133F041DA08010A23CB6F08FD9F2F2C337484E01A81051E1303168C8BBA0862E31281B4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-J2ZS00.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-J2ZS00.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-J2ZS00.lnk
- Size 1KB
- SHA256 cbbf12bcf696d74d255c960f40624840360f09002633e1ea32e141aa6d80cea7
- MD5 427de7935d9643c426bbd2248d839c0d
- SHA1 4fb05dd401b1dfeb8fe7f7e93f76f9e7ab6ea175
- SHA512 6e9b6f556f368fc9318d5ad25c8181848208f42313e0604630b238c8d9ced34223a5e30216021653f0f8247c0d64b4eb47b98f90d8f0df49fdcf603c3b206817
- TLSH T12E31CB103FED0624F3F79F7388BB572489BBB9668E25CA2D0042460C5472E15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.