General
- Target DOC-2MY6J2.zip
- Size 587B
- Sample260804-kbjv8avfmb
- SHA256 989f1bbc0f2c8dd55a3d7062ad150aef655c57262f2fca5727514da25a10c7d6
- MD5 2a07e754ae549e33ab59553fa75595a4
- SHA1 6c4e2cac42e2fddecec818018ff8db668a838f24
- SHA512 347ac7e94054e5a02476a6a0fde940c7d48ef4b85fd760e305effaacddaa20f524db62e3a7ecc78e372fb6c907c323e9c9d05a44512c7f15655d788d603925e1
- TLSH T14EF0265F035D1188CD3246792035B6C0C77F4805538FB651DA29C5316D4D0751F5E5EA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2MY6J2.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2MY6J2.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-2MY6J2.lnk
- Size 1KB
- SHA256 34b34f93bd9328e0907919f6e731ddfff30e3a5f24d549f01462282124b88efe
- MD5 42e255473e9d8d3f0759736c303f342d
- SHA1 37a70fcd3df01452c7178b1c9e4fcb12655f032b
- SHA512 a7346bba8d2690f2e40624fa52db7465482529061dc921b56e83ac6991babb5ac485f55b7f6309dd1aec74c15d79052f59623af823334e2850a6e1ef1e5ba6d9
- TLSH T13F3147503FFD0628F3F39E7794BB572485BAB89A8E20CA2E0141454C5072A15E57BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.