General
- Target DOC-4GCOXY.zip
- Size 590B
- Sample260804-kbftkavfle
- SHA256 0b7960994953b5e830333aa8e6447845f64e2145a78cd015c2adbf316530d39d
- MD5 674fec426754e88f217b92d885e023a5
- SHA1 cf722a4e5292614a198b44ec927fbf0186ed5553
- SHA512 0be83137eb27065fd7fdf2c78b11ed09223f068aa0acb8ed7201f3218c252796140ad75206ec6d589e19bc04a38b2df50d06d7b617d0d460aa73297be08e8d51
- TLSH T1C3F0061340E20409D840ED346280105BA8085EC3CB0BF3460A7EE89F4D280F5EF4C3D9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4GCOXY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4GCOXY.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4GCOXY.lnk
- Size 1KB
- SHA256 0c41fa269fbee2f870ffed5c624866d56d54fc8598a87820c579ff536e2aac90
- MD5 8d90e6f901a050be1c282c6c8bd3aaaa
- SHA1 abb416d6c4976dfe6062c5f8812a0e9325ba991b
- SHA512 f8592fa0c6b379e99577b198362dd290e26adc277b7758610bc3f7527045f14e04ca2417e672fd25111a66d2701d053593cc4f100594be61c81fec0b7905be65
- TLSH T1763197103EED0624F3F38E7284BB572099BBB9A68D20CA2E0041460C5162A15E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.