General
- Target DOC-QBJLA6.zip
- Size 594B
- Sample260804-kbmbcaar91
- SHA256 1384e14f1f2c96f1621c3ee4cd79d3812345c3baed13aebb52d045c51d84afe2
- MD5 b042ff0e7b5e5317e66ed9b38e3efd9d
- SHA1 3202187cfc1599c8002891b1c8ff67fcbbd83741
- SHA512 3d6acb4240022d8bb7906d1e7995a5a02853950f0bb075c0ccefd4a7033920f92c7f13c186dde32a6ec8430d1805b0404690670ad140ee6a2e4bf81480ee6217
- TLSH T1CAF0E15743E45427E7AA48B930757D0F65574D14079D23954198F5F81FA8713451D238
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QBJLA6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QBJLA6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-QBJLA6.lnk
- Size 1KB
- SHA256 ce21da3ced981e1266ecd376f69bf3f5e3dab3268b10411127e6b1326468adb1
- MD5 37d551c030dbcbf38bc71176ffb44ca4
- SHA1 fe4521920ad1761c331f2923a25665da0bd750b5
- SHA512 7c35b31a3c01d2d11d4de5cc3d76294c604d9e6e35d3a6294e6712ccb910c8aaf318e4f2c164ea1c9caccf1524bf12b21512734f9e6ca50297141f93f6d46f75
- TLSH T1A23164403EED0624F2F38E7698BB67248ABFB8568D208A2E4140864C5422A15E13BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.