General
- Target DOC-ZFB3MA.zip
- Size 588B
- Sample260804-kajttsvfja
- SHA256 f5bb038509b0f62df7f127e776132296aeaf5c2d0712dd8e7f397d74c81041a5
- MD5 3541cc7ebc887f18106a2d7c062fce72
- SHA1 1d49834f229643a1a059d518a06fe687d2a8a657
- SHA512 fee22cf49f14a50e59a877f817bac17b11e314d3c2134fbb718df85eb0bdc473212b0ce5f4ef95224f045dea1b537e4f2f1bd0a1634c62d75661b8ab7572fe94
- TLSH T1E5F09693DFA41140F87331F820DB0226D88BD0C4181712351B3AFC0D291D7EE39E9480
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZFB3MA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZFB3MA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZFB3MA.lnk
- Size 1KB
- SHA256 6782d26397520bf7c70dcbab25260e3e07083130a7c236b2062cbc006d369dfb
- MD5 bda7074b6e90cc163fac9813d96d187d
- SHA1 85c286d737c6a41e85ec6210724c8e5bc2757bdd
- SHA512 5269764f8601a7baf2956098baae0e513c6731139f6240119b919bddf4fe3a88c07cf8227468ff1dca5424fe86e0f5de60de65518c2c702c6fc94e7c29b4f4b7
- TLSH T1B3317B503FED0628F3F38FB798BB572485BBB89A8E20CA2D0141454D5172A15E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.