General
- Target DOC-JJCTCC.zip
- Size 590B
- Sample260804-kad9caveqb
- SHA256 38587717a949ad46856e32ecc36b72522d12aaeb96f8be6e13f7af75daaa7485
- MD5 a581d8e1a43d6c2c1132898671a8cf1f
- SHA1 49778dff474100f2ef5e337c2e4eba8f23ccdc5e
- SHA512 a96a3b13518143209b3cd811282ac14c446a5d3f0066996ccb80f3c2c65b68829a7b5d944700c125b8eecb774027e8eabe27780ade137c3f96384bcb236a1d1f
- TLSH T1F5F0E126A92D470CC839A4B15DDA7C5941A8825055438E0F913AF6CE647C3951C95D01
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JJCTCC.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JJCTCC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JJCTCC.lnk
- Size 1KB
- SHA256 a9aae4883f5fdc38814c10a11c643420933dadf973661832cf9c9cf656dfa6e8
- MD5 8e66084747125e918e9798da973d60b5
- SHA1 23862dc53fc32ce1382574e26c5dc2498cf29d19
- SHA512 b25ea67b7daa2d6ffad634310ad8e33f5d0f6b6b598bf5744150f5649392bb3ff461a903c2787a8dcd8e1809e22d73b574ab0980418274c59762dc8743c88edf
- TLSH T18C3197403FEE0624F3B38F7394BB572089BBB8958E20CA2E0040450C1033A15E13AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.