General
- Target DOC-GTJ37O.zip
- Size 582B
- Sample260804-kbf5bszzh1
- SHA256 b7ed4a531d9af0b911cf1a036df3fb04f0dfeaa08a3cdbd47e1530329a648518
- MD5 044e5a916a7fd765896c5fb3bc77d807
- SHA1 73407ef042f1b6915c08eb8ed2fb8f7d94ca4384
- SHA512 8e83aeff23e4a375369afc6587a2df63e001a843fee6278ef2b54bbeb8c290bdf25d8d9c75461a0a7635a041a33b55bdc9f38f5856701128a7a53e46075ff357
- TLSH T107F026E7D5407C6EC81400B1708AAA6B4355D254FC8A784F77B6BB25F8549F40D044B4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GTJ37O.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GTJ37O.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-GTJ37O.lnk
- Size 1KB
- SHA256 98ffb4df03e3c58e940d700086987dc4c83c92b69a63fddadecb99ed29633ee1
- MD5 a167e849e1b7b5db7ae10f25b10db34c
- SHA1 c579d9a2f2b06940200788049709e0cd12f19f51
- SHA512 d3efcc9ec394c481d66ad85b3a069ab52f8b9a79d07457aa136e8c7530c8ce067f5da99ef67a8f06b57ba0fbee2f5da865e4a836a32a7928a03db8063b469d1d
- TLSH T1DF3197102FFC0A24F3B3CEB785BB572089FBB8A68D20CA2D0141464C5032A15E13BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.