General
- Target DOC-FIK1AT.zip
- Size 588B
- Sample260804-kbk4aavfnb
- SHA256 5b9dc373c596b407c82828cfaa2b6daeca210cdf6a39b80016165546d66e3c59
- MD5 6b7914b761068bbb9783c7b8ec605671
- SHA1 e18242336973001606f0ddaafdb9c6c714a32750
- SHA512 c4e395aa2bf1dec75867ea1786f837d05b5b93ce9d600288343c2c5e8fd395c96cc006b9a9c5c361c742dfe9bbe7242d692a29d3a98a284baa1e6fa897e70489
- TLSH T16DF02667034D516EC72C4070D5A358662971D69AA74943FA3133DC553CB04F15B17DE5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FIK1AT.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-FIK1AT.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-FIK1AT.lnk
- Size 1KB
- SHA256 51009bdb6dec86c85198eed2a334eb15b003527b1b5b5981493fe4f248812608
- MD5 c357e3129ee713b621a1f71ee03753e6
- SHA1 53db46adb9815d14998acdd07a1f0558932ba7b1
- SHA512 50ce60bfbfcd968b7a883c3d25690ebbe8388d299a9185383335a534c1ffe8d96228854f38324868ae79c44a6536e77ab0f5132285b98d3623fa2a79fda459b3
- TLSH T1AA3197502FED0A24F3B38F7684BB572485BBB8A68D20C62D0141454C1076A19E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.