General
- Target DOC-YQ4XKX.zip
- Size 590B
- Sample260804-kagz8sar7v
- SHA256 091606519db76abc9c7e2252d56ffd1fc56f018cd39556b9d04aceab8cd3d488
- MD5 e56ac17c39e75b7860dc309608cc373c
- SHA1 5c0f5be60a73e52219100177bdb915f3bca051aa
- SHA512 e7cd5e37679ecad0b5d54d50cb492e9257557481f85eed796a46b278258534f575ec96516c1640f4c787bece78cb42fc2f4abee284ad5b098ad1451e8b0ede13
- TLSH T186F0E185854E404DC42D9CFCBADE58CE15945243510FD75D6C74B75D05143F5AD0F64C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YQ4XKX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YQ4XKX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-YQ4XKX.lnk
- Size 1KB
- SHA256 ed0460d5bd73eb05aef6f3d6d7b9d42cc2dd0cff685d520e7848f496167b05f1
- MD5 c3740cb113e9b0215399b264c1fa3706
- SHA1 5eda85f71b60c69b3d3d8173cbd53a7af8e1bde8
- SHA512 b4911989929a3912fcee5823bb01ce6eca2ceeb81794c424a51e8c6e49f231dadaaa06be333b568c84b9a84f9e5e41afb33820f80c4380d4d7d28b3d40ec90eb
- TLSH T1BF3197503EEC0624F3B38F7798BB572489BFB89A8D20CA2E0140450D5032A15E57BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.