General
- Target DOC-79PJVJ.zip
- Size 582B
- Sample260804-kbftkazzhy
- SHA256 d8577a4afcdcacfa2dfbead8d337a836bb94cc4cfea768cbfa1c55e713de6757
- MD5 bc008c64a0e7b1cf7681d4d4248a4aba
- SHA1 661d326e22529dbd9ed1e07599eb11239a730873
- SHA512 6e78a34bc7c94b92a0a0a8f73a83a6975e076517e01a741a272e48f9536528b3783a0c3f31c8b856f0308053bf2b0cec47be3ee58de62ebd8a91794ca657dc1f
- TLSH T169F02031932B8B14DD0B383566322AB2336DFBF2066B1D8D55F9D8C24030DAE2A4CB75
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-79PJVJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-79PJVJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-79PJVJ.lnk
- Size 1KB
- SHA256 5387003fa561a7627bde4aeb817d539e5fc10c28ad7385bd8cf0dd4db3ade759
- MD5 370d7ccc315f9487dcd3f860af6170cf
- SHA1 478ccfc00d848034f97c0ded04f3549c2180732e
- SHA512 c18c81bb9a0fa27c6c97891471531b9210a66af191a1c6ae0c1ad11f61c5e630abf395891d5aa7d47365427d9b03c212701d57c6f07bc43563025f6446a734a2
- TLSH T1A03197103EFD0624F3B38E7298BB572485BBB8568E20CB2E0041450C1032A25E13BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.