General
- Target DOC-RZEE0G.zip
- Size 585B
- Sample260804-kbm8msvfqe
- SHA256 c8ff8a7b3a3d51f43f53fe1b969d69e4554fa2b2ff4e4573286f088f3d375216
- MD5 c0e60c85b6233e9511b8b1b30a6ad06d
- SHA1 2a47d1d716d6c25ff01354302320818c39a828f8
- SHA512 91e1e63102b00bfee0e17db4f3a589d0a7548afb882600488c0d0b5b097122f371a17a4c16df1582fcb48965f154efbafa29a7c1d740a862a1d642437c546614
- TLSH T18BF0416B208D0286CC0B93315C3B04AACA32E8DA108F279C4BEFE6889AC04938194231
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-RZEE0G.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-RZEE0G.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-RZEE0G.lnk
- Size 1KB
- SHA256 4c68027a8670961fc85f263b54e5bef677b3da50dbc650b11ed980201dd691e0
- MD5 0b97f794cba379e42f2c13587da89677
- SHA1 7bece9cf7eb2147dbb382e66584dc804503f5fce
- SHA512 409a499c97f9512628b706d5f6c1303a369d6ababcd060f0dbd8d8e5521901fe0c0b7f95f63ceadf5265ebd18ae536c853fddf50a86521ce7d5aa7f4638f28de
- TLSH T1DB314C503FED0924F3F78EB695BB572485BBB8658D20C62D0141454C5062A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.