General
- Target DOC-9NXQCC.zip
- Size 593B
- Sample260804-kbftkazzhv
- SHA256 6ce26832acb3fe3169d8e0fc8a4cefa5119dff8f94612689ca15a3f0b657be51
- MD5 590e328c12518cb424c49ad1c4a35ffb
- SHA1 b5f987f061ad3ecccb6e71bcf27947b16dbd4284
- SHA512 29c8ad6b3b797a7a3bfee915908a56e9d9770b396c71ddcda951dc01ce49cacbd025d3b118d888b60a8d19aad001d5148a1d1902641403e2891a1b222ecce0d7
- TLSH T169F0415B9900C91DD98101B4A7C2E60B026DD14A0F0FD71AEBAED074781C1762E2C208
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9NXQCC.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9NXQCC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9NXQCC.lnk
- Size 1KB
- SHA256 4adad8ca034dfbe84ffdae1cae1e32a763d9f1046febf3123357c3d74746c0f2
- MD5 2dc8212e077decf3ee62684970eae5fa
- SHA1 68e86acc3f1fa3c071a193e4345112fb2c8f7738
- SHA512 a15e6ff4935d63d9d30539ba2570d79aacafb0150b9ebcffb3849f750f047ad625694ce60e55277b09d05013f864308a278d03823c233a540209d2b56aceb88d
- TLSH T1E73197403FEC0624F3B78E7398BB5B2085BBB8558D20CA2E0180460C1032A15E53BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.