General
- Target DOC-TKBRUY.zip
- Size 956B
- Sample260804-kbk4aavfnd
- SHA256 82c1d6afdc7c2f4895748784a6e3987c0128ce730b2da921086621884f1e60ec
- MD5 4159cff3334474e0e689260a72456eb3
- SHA1 83d505aeb420eeb599c82323c34dc18a3ab069c6
- SHA512 ddf194805cccd925c23a8759438514ac717052cc32f08f0161415813ad2ebbdb9beba87bf3b186ee411c22494ee7ac9fb40a022b2a180358a18d2495704c7205
- TLSH T16E110CC8518C5D34C0C8E0F39B20BA3C3A69CC44338A50C75350F8B472271A40E4A7C2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TKBRUY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-TKBRUY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-TKBRUY.lnk
- Size 2KB
- SHA256 beab6ba3a1878e99d0ead7652440bd698082430caff92afd039eb781ae89561c
- MD5 a2fe9eaea46867f6b4ae83ee590abe3d
- SHA1 22c4f2df2bc96af97bceda560528c6f7dcf0083d
- SHA512 4cb4d3bc71cb1da73d4abf08f52b7165926f2413112dfc23c474142817f34b8e9a0862676c632825ecef50a08214d74013e48922bbb466a63180eb9f165c62a4
- TLSH T1894124802AED41A8F2FB9E76DC7F7712497BB9A14E71C58D4850810D4422F01DD77B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.