General
- Target DOC-XY4FGL.zip
- Size 585B
- Sample260804-kbjv8avfme
- SHA256 2467439f786009157fe27be5b8926520e3b58a75cef02243962a9f577faf6ab9
- MD5 5ab243ec3f33bec3c3953b868aa47e1b
- SHA1 852033d89651a7049e77e2141621650d0ba01968
- SHA512 43c62d002c8dfa96e1afa29256f0a5f26a145f121f11577445c40c68947096301dc5c66a655ac7eddf6470ce94ad4e2437d81fd08df6993645791d6ac764c026
- TLSH T162F0E1764477008ACD5E88349C6235E8282D7459C6D6A7CA10FCA8E9EC1000B3D46118
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XY4FGL.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XY4FGL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-XY4FGL.lnk
- Size 1KB
- SHA256 db546c15984f17c7cb11570dedbae1ddf547fecadc8f055d201942f87003b964
- MD5 8e2c1422ad42dbf058e5ac91588f3832
- SHA1 06d298b12e550fefd067c70549b7dba181065ab3
- SHA512 03d0f2366fb5f06581ce3448c1935e7e77c6a6eb6fc1c8b0f3af965a081b04c3209bf599e22441386ab4d0a4c6812d99a5a5d468172885e3e6460619a58b61ab
- TLSH T1903197103FED0A24F3F78F7284BB6B2085BFB9668D20C62E0140450C5032A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.