General
- Target DOC-HICEJ1.zip
- Size 926B
- Sample260804-kbjv8avfma
- SHA256 fd46b7bf37f11d4aa98bff5344123a7e305c9643e6964ea71b67b7cac6749025
- MD5 4144e6faa7788f5e33a3bff28a45c683
- SHA1 c72cfe8a417a6a996a304e0ae6f97daa102f6c90
- SHA512 34fb87f4d34a2b6920ab58c6714f19c7c579bea63716f589139ef5ba43c1e39cc2fbf0a9ee6f5935a001b8d381949e6d5e4302dc8b449ef1e3d444119ec22f97
- TLSH T1D911B76071B61C01C6F9C47C6763D41102F46A42F2EE964F1361D0C91AB71F5AB02202
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HICEJ1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HICEJ1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-HICEJ1.lnk
- Size 2KB
- SHA256 ab4a8a3d200713ef7cbe0c0478d147ce3c9605f113f0bb9fea2a6fdc398bf7df
- MD5 ce541341deef34d9a8e4541ba1a41321
- SHA1 26f88e9d76fad6c38e2add6db5e02c32116c71e3
- SHA512 392fda4f6fc1b14570a1d4694916e20c55986422f00fb6aadd0d1ac097a0162c754a1d1ed39aa3dba824df033c3cebf98ee382f7f5898336a284f592ba640dc6
- TLSH T10A4125903AFA41A8F2BB8E36EDFD2B14487FB9615DB4D91D0950810D5422B41E933B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.