General
- Target DOC-X01HQQ.zip
- Size 953B
- Sample260804-kb4wdsbj6v
- SHA256 5beb765d61d46beed1812c95ae18c7d2ecd2a1305bf0f3c42af1c4288e4698af
- MD5 ab2df2c2d7d92ec899ba4bc4261ab14d
- SHA1 295be4780f48b6570ff74a5285fb016960022820
- SHA512 ba346c91213cf867aff4b86160261fe3fa4123eec27e11cac813c77fa794180894beb8b8c6e4002e679ce62ca2eea65ae9cd33916b476fd36593223509fb16ea
- TLSH T1D6114472E1255AA9FCA8C07F185274154CB8F04B628EDB83902D643D0C7EE995B8D6F0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-X01HQQ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-X01HQQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-X01HQQ.lnk
- Size 2KB
- SHA256 4110ab4a28aacc010ace8aaad306b4566ed28e1ad07bfd401e5f610e2033a24c
- MD5 64b3c799ae4d8b4b79211fafc364899f
- SHA1 2c2a7a11a8f1eb9c12751640a45debae8875f9c5
- SHA512 8b1c5d739b1567b23cca89d99c66718f6f1c357397ad1a2e63c80520c9d5758c5895736158519fa5084abd9034619b7dc3bc2f705ff688d2839fb24816d9b10f
- TLSH T1414156803AED5194F3BF8E76EDBE775088BBB9A26D34C59D0890C14D1822B05E537B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.