General
- Target DOC-HRRX5J.zip
- Size 869B
- Sample260804-kbm8msvfqd
- SHA256 3a8248f7d4e8be0170ca8b6fa9438b24f983f0bf8273539006666fbeb3f8c078
- MD5 bbed9e78f117171e48fe00fba0335612
- SHA1 b952eb563d6c82abe0754b199967b2d068b3889a
- SHA512 08476249688a863d096f689903d9dd7b2eadb12b9bba70db3e03c7b9232fbb28ba8699540fb692d5f947157e4e8512b30c722227419b4c6560bcc47e3926e5e8
- TLSH T1761156C0CFC94B03D15781FE55E7389B1B2BA0C182DC5F4A7660A00584294F69B951A7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HRRX5J.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HRRX5J.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-HRRX5J.lnk
- Size 2KB
- SHA256 c1735c030e92d2cf3d6a7491ab4f17e02a54cc4b2d35db629131e6092d4b7b21
- MD5 963e544f6aca71f496233e01937b7c2b
- SHA1 4c6a4ec92e7ad300dfbfbed1151745ec6154b814
- SHA512 bdc9e8484b14d00d107a26cf10afb16d012ef342792bb839f3a0bbb6fe2d69cb8700f25cfc13f12129c7736a79436003c700c6bf80a078d86a8e35c782ba96aa
- TLSH T11A4144802AF841D8F2BA8E72EDFE27265C7779968DB0C6DD0840810D1822F05D973B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.