General
- Target DOC-OQLKIG.zip
- Size 856B
- Sample260804-kacqhszzfy
- SHA256 c36c3a063d652ebbeab5e82c7a3435942f58464a8fa15a5c025295f73827bf1f
- MD5 5cf090800c204783a0c055f651331154
- SHA1 4912b89e1797709b50f819bed6e12f6ac362a712
- SHA512 0f9dfc096a8dbcfbca3b573f3cd1d3ab95fe68c0584c983391c821f5edcea4aaa07a40c9c38f40b040b60ff0dc2a545f4285dcaeec3f56abf84f504542b99310
- TLSH T113118A823668C03CFF5953F4F32717EE1362565C40FDBCE0251DD1092876093A045EE5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OQLKIG.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OQLKIG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-OQLKIG.lnk
- Size 2KB
- SHA256 7809e4ea08a6fec21217ffce63324a2445a2f7392f742497d0a7d974aca9a465
- MD5 a87c1ef2187da8be262928f012d89cc0
- SHA1 82f3d29d5f00b641aecc6d63693a8ae8bc5c476f
- SHA512 d14274954e41b2d54e82e949ecad9046b591f2fae17bde2338de8ba9fa2b82161f460242a2cf68f4674e613ffbf058ecc373a1da136c9bfa43b52b148b6d4f36
- TLSH T157419A513EED00D4F3BB9E76D8FA2710887FB8665DA1C54D0980810E0822F01E937B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.