General
- Target DOC-ZEQCGR.zip
- Size 879B
- Sample260804-kbm8msbj3t
- SHA256 a61666c5d424b57ad2b1f12a658c6b3402b8a6186222f5fc9cf0063f796ef354
- MD5 d2e7a1586c256d616f44790146245ac1
- SHA1 8f9b53a6c85640ef5d37b3f920dabe99e7cffa02
- SHA512 bf326fc4c4083d684339aed61434c32a570cedf9d5ed81465d3d4c0ef84f18a5ed084887a717b21c5d45a1953238aacb7feec7258479bb0ab28090353b64e81b
- TLSH T1641196CA05E880A4E57A48F7A43C340D9077B1F9D4C8FC47103FF4B20E116801EBA5C4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZEQCGR.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZEQCGR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZEQCGR.lnk
- Size 2KB
- SHA256 592a9749aefa79ff7b043775939b8625e8b9dbdaee63ee7886257062815b4f27
- MD5 9507e21b3e4c58a56e260286646457cd
- SHA1 df81840c7fadafe8b960896c7e48e1340656a23e
- SHA512 f213a447ca8c1f8c00d766ab16651a412df753a017a89950f1f88ab8b2881758de10507451279e2f63af799768c6b8b85598c8b5f31a56e275bdf105658bab33
- TLSH T1A641F1402AED05E4F3FB4E72AEFB6B51897B78125D70CA9E0544820D8422B12E977B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.