General
- Target DOC-QR2KD1.zip
- Size 586B
- Sample260804-kbjv8avfmc
- SHA256 c1588a21afa9fde0bcf649b5c0db557803304e03514d17917081b3b8dd236880
- MD5 1e80d3cbf277629fc3e7afcd577bb85b
- SHA1 a5d5bd3a2ff1295a497fdc124526c2e7ecf76f52
- SHA512 6bd4d9d443c2c0eaec6d690dfd424addcd04757f40fd0cd902512ab80648b981deb2f97ecd0dd7bec55ed0023ae09583f627807c74599d8afbbab97545631a28
- TLSH T1BAF026C78EBF148CE158C97C7DA6F32C6F305CC5220F1D8D1657D327B958450A939195
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QR2KD1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QR2KD1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-QR2KD1.lnk
- Size 1KB
- SHA256 2a92eb355f9e0d4910aba1ff7180aa1a477aa4b822b9ab038d90ed0f1cc7108e
- MD5 48845e3930f2a1fb96cb7bb8778132b9
- SHA1 087743af5a8cf5b40152e81ac30a356c3ce44d50
- SHA512 5ec28509a7ced2867db9922b1b4a84f55f5105c4a8eb3f48665c1f295889efbaca46a269e67a292f07d2bc3b9f14be043edf5ddaaa3f399279cc80b5707e477e
- TLSH T1DD3197402FED0624F3F38F7399BB5B2489BBB8568E20C62E0040464C5022A15E53AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.