General
- Target DOC-WZY55K.zip
- Size 987B
- Sample260804-kad9caveqc
- SHA256 0aaccb7068c7805fa4dca276dd45f78006e4b525bbba3af4c9a22822814f8421
- MD5 558f503705e54ee8ee53ce7baf736f85
- SHA1 3a44b1b23885d45769d31f26139b47ad628957fa
- SHA512 9b2552c26b2aa2a3d45ee8251a87271e88ffd62ad9b36bccd6e43c58a3564cd1bd726beff5ec7c7cf086b6d1725982999298c1123289e06d375bf8b53e59fce9
- TLSH T12111981D675585C7FBD542F90BE948A3E035709000E38F5F0970834574398445E153E7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WZY55K.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WZY55K.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-WZY55K.lnk
- Size 2KB
- SHA256 48601f485883666fba433778d9ebe4c6d4994a7433e7063d1be35881226d400c
- MD5 c9020b1f79290b3abab384d744430393
- SHA1 ac96b7eb93df97d490c4f6bcfcb60032e7525d19
- SHA512 54202e47004a8abf5f26afeacc3c596fdd0d6e69e388db2481ff4dc7593a26413116bdc5c2f92eaf52c21a683e80f8736cd5322d6df7090cd80a1eaaa6265b67
- TLSH T1285104903AF945A8F3FA8E76FCBE2794597BBD925D30C59D4841810E1422B01E8B6B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.