General
- Target DOC-PQYYMJ.zip
- Size 908B
- Sample260804-kae6msveqf
- SHA256 9076ad39a7f3c72a050b61620622e4e7a83be6948382e6c1400dc9c23f031f84
- MD5 7ccb19115beaa9f746620055b74e732a
- SHA1 b89afba31136ce4abb58c3705af49fc2b327d30a
- SHA512 653684c870c3672b16b27f297c51602b33232eb8fb89cedff1cbd029f8a6e714457da84311fe33c2fe5423bb19b791e9630d485b37ffecdb9f1cc106ec4a481e
- TLSH T12311B723B9371C58F1559337BAF50022B81884051A5C050A5113F9CE5B454782FE99BD
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PQYYMJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PQYYMJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-PQYYMJ.lnk
- Size 2KB
- SHA256 95dc3769521fdb0cddac23bd78811c647e0fb76937aec9a238d674ddf2293ee2
- MD5 59e0e060b2ae8ef5e5bfbb63b929d9fc
- SHA1 194153588d277fece4439beffc482680eea2b92b
- SHA512 19072a6ad9a223a06f8f84ef6512044e09ba1d11423ff5a655277593bb7ddb50e9669966456bb0e123fbbaca6324118744d855700fa11dd0b87c52ccc691447f
- TLSH T16D4101843EEE0498F3FA9EB2E9FE27004A7BB9555D71D94D0980820D1423B05D877B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.