General
- Target DOC-KIBZCR.zip
- Size 592B
- Sample260804-kbmbcaar9z
- SHA256 691298e109d52ae01a50e23aa092eb5b7c751c4eb9ad5a75c54d1178d36df615
- MD5 abb3b18150c37470c3ffa3e974cb13c2
- SHA1 a637bb308bd01c7c081d101df82bace5fba07e8c
- SHA512 6e4fd41bd0c0db3148061dd1288f171655b064f09758baa2844f635f99062cfc7cb958762fde0946dc03ed19e9bc2b4ec232a32c9db14f6b3bb64d7f73c33c45
- TLSH T180F041C0C3B24249CBAB5AF1EDBAECF71D9B5123825B05B33500CE0644140B08F0F9D1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KIBZCR.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-KIBZCR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-KIBZCR.lnk
- Size 1KB
- SHA256 7069391ac5ac74761c77b62eae0d1606c30893bb825592dfdc7eb74c64d0b529
- MD5 5fac1e7321dd472dff59c3f415028058
- SHA1 7e72f42eb774165f712f66774edab2f757b4e5bc
- SHA512 423c621492e30643a74c40b4783c2ec3caeffce7b485134b0c1d5837aead7ad12d1cecd693d054a50dbc9c72e8a7c4854f922fb3b691af603c059eedbd73a20f
- TLSH T19B317B503FED0628F3F38F7794BB972485BBB8958E20CA2D0141454C5432B15E27AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.