General
- Target DOC-J8FJSU.zip
- Size 588B
- Sample260804-kbm8msvfqc
- SHA256 13c0271c462c007d381866c3a67a3b4d3a08fbc7ed0587804b24eb7cb311a71d
- MD5 d3de351604c6ec610233974fef3a1d7c
- SHA1 576b142e44b3d842cd88cf6faa11d0d5615251c6
- SHA512 5d1bd8612b685ae07b1f487b3937b428dfdbc58556b54de946b2f04ed5e6598eb53452236267d53634f8af18df902d71776fd06606fb52f326eefcdee5a476e3
- TLSH T17AF0E17FCE87384DCDE6C5F19C5724EA4122224091C32F97A479E3CA19251C26E1C7DD
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-J8FJSU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-J8FJSU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-J8FJSU.lnk
- Size 1KB
- SHA256 c52f314031a27e8e9bc0fc758a9b0d766facbe0a47fb0a2efc7875638d02c241
- MD5 e5abedc18a5f586ff2a3b2cdad940db8
- SHA1 73868ff7729281435a1acce1ae45ddc96f03f893
- SHA512 93331b7f0868095d0e0f95cdddfe0b8266f85dfb40056100617dd7429e1e6c4144f3dd006996a43ac74beabea5bd21d26e78b7eef16c0d2c4f92259b8d931811
- TLSH T19A3197403EED0624F3B38E7385BF5B2485BEB8A58D20CA2E0081454C1422A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.