General
- Target DOC-ZN4NE8.zip
- Size 589B
- Sample260804-kbk4aavfnc
- SHA256 852b4d3300468748b79be7bf6252d3b6163c2793b12aca29f62c58d6d10328d4
- MD5 d217b6583a5699447e19a54bf1be3169
- SHA1 61e3d5397a15e45d3a2f069e8a49b291a132a4e6
- SHA512 a662d8bd15e10674d178b85cc52c6342209f421ce7836e250f497d216ea846f4c364c7919dd848e65f00123ee121a14386a63fb556097227d6543ef109ae6ddc
- TLSH T177F041268263DA14F149547909230F91430046C74BA31B0BC22CCBAD5AAABE50898075
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZN4NE8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZN4NE8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZN4NE8.lnk
- Size 1KB
- SHA256 1b8164bd78c0067afa95c2dfc544c13f4a5c8b38c96047f8d54d75fe7023a738
- MD5 13390c09ec98406f4fe3d0a6333034d2
- SHA1 02c7bf2d9b948d9b4424a214817723fe2f252b1e
- SHA512 bb04f363d4a7c1e4eba6ce3646676386dc9e811c311b583aa34d3617ea1962c4ea20362ecf06a16f61e6ec0793b0df4d5b25ca050ff72af7568f121140c5b75c
- TLSH T183317B503FFD0624F3F78F7794BB572485BBB86A8E20CA2D0181454C5072A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.