General
- Target DOC-ZJODK3.zip
- Size 947B
- Sample260804-kbm8msbj3s
- SHA256 12aab0373d807a03e7cf616425868ffd4b3dacde7a2f08858e73f684f63ba909
- MD5 ea02e6f1870fe25a51bddbd7611267af
- SHA1 33668b477054886462fd4d278d2c64bfab60750a
- SHA512 50bd13f96dab9438127c54af34bab12801e860cd59694d47e0e00a05e22dc0a0aab125db269d26f14d8407c9a6e33d1cae0b107d0096e56cfe58b158f80a457c
- TLSH T12711B7CB40ECB02CD1BF147198F37E21043D0DA18324755E9B9DA458CA87F239D2A3B2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZJODK3.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZJODK3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZJODK3.lnk
- Size 2KB
- SHA256 0bdba41f86ddd745c54d34d8388706ed63409661a38b2eb2b940211817d07c2a
- MD5 9bd37f6631deca0520303ae427540e7a
- SHA1 8df57a3b5bbdf6cce02981fb6828d600c3ccd029
- SHA512 031b1e6ca4629a0aa13b0be4ab14326761ccaecab1dd21033381a867621037a605c4f9d10a74e606ef659d9296f9a9c1a5bfe6cd84bbebbca4370e9ce2d02653
- TLSH T1FB4125803AEE1198F2BF9E72DDBE2790457FB9526D34D68D4980C04D1822B45D537B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.