General
- Target DOC-ZF0HS6.zip
- Size 911B
- Sample260804-kblptavfne
- SHA256 f71bdab8fd4a2a38c12f9a6fd507a072ecb24e824691043d9ae3d5f73258bc93
- MD5 f232a3d9b3a5743095b8a63baf4b212f
- SHA1 78970336965999d2f055a290cd668c54e2c2f6e6
- SHA512 d4737010f9a3d5a66370e39b4bdaa139d9545c79af8ddc0511f45bc9013f23048524ce2716223b0bf14bb97608494b77dc1140337eb8157f2fac7a4cf4d9e628
- TLSH T1BE1163234022D01CC96AA17856603A22C0326553612A98D3DDDD9A6C19B23EBEEE3DA1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZF0HS6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZF0HS6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZF0HS6.lnk
- Size 2KB
- SHA256 df0abe211f63ebad6a5623ca03cec2c967826d7a695a8cd9f6da164281e864a0
- MD5 3f392ef2be907f833ad34c4dda4e265c
- SHA1 9a11abdf8845cfabc411aba222a3a9233b53623a
- SHA512 0ebaeec8c67c9bc05aa9c209fede4d0ac0c6285a7bf131449c892904d7fce04bcd7d1ecb9b22c22cc2e16b54063c41f430b8b8aaffe26e1c3c217136b626c4b7
- TLSH T1B74149902BE905D8F2BB9E32DEBE67814477B9567D31C6DD0840814D1822B81E637B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.