General
- Target DOC-XF4VFZ.zip
- Size 945B
- Sample260804-kbmbcavfnh
- SHA256 2d8da13228ee9ff9632c2d552c5678d5e992b89a619d184f3da19a398c59517b
- MD5 afd43b75aeb39e09e6245ab1bf17b3c0
- SHA1 0533b2afb8f1912b9531fe2a2722c19652f174f7
- SHA512 5a404e20e47c6007fa9246b1c3ce08332273ceac9eb27a9a0558c2536236c295e23425b051606f6d64a0bed5ca5b75238747cf7e320f8b7ad2ce87cf8ee1d1fc
- TLSH T1DC11C86FAB9C45C0CC1345FFA4519D88FC2585A61086B7ABE268306A28622743848A3A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XF4VFZ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XF4VFZ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-XF4VFZ.lnk
- Size 2KB
- SHA256 8ed8f65a6256ba9b878afa6e6eb3e95fd275e75346db668aea9c9a8646f1d955
- MD5 1fbce16c500703964d38a8a09686a09f
- SHA1 dc5b2f05bdb832eeb4d0a27bc0a40edc5544fd1e
- SHA512 12e840e69605ec6aec8964256226ffe55fd81083857045bc5eb3b74cfe9fd7a7244156f5b321e52f83a0d18421eda06bbbb47b33a87ea723e41cedfdbbb95cc6
- TLSH T1E94105842AEA01E8F3FA8F72EDFE679485BBBC215D21C58D0850810D5826B01D577B33
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.