General
- Target DOC-ZA0JX2.zip
- Size 866B
- Sample260804-kbmbcavfpb
- SHA256 c1296b83dd45640c876c9896dd341ba6fab6e86123f27fcd0fc72d6bf1a4d6f9
- MD5 95456996605417446260582668934a75
- SHA1 d0534dd491aa338600a9f764673445a20dad4c71
- SHA512 dffef98c43ea7d086101f3bb9d352b118d4a6b9012a64992cd1b2b931152c467b0cd4567ad57001377512d19b74b7f9a2ee589f7a10f0ed1ab526711cde206cf
- TLSH T1AB119E96661A0C06CB0EEEB2F430180683283B220AEE273254FAB842214F7002F2B0A0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZA0JX2.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZA0JX2.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZA0JX2.lnk
- Size 2KB
- SHA256 56bd8f459648520927042936117a448389a1a16c95e5cab284c8d15ac8f117fd
- MD5 1b8ae5ea1ffd729de7b66808be47a96f
- SHA1 9330a95bc71b44955ac58e028c20cf68521359f2
- SHA512 4dba73b073d3f942accbc6a3f8a6edc08003ad74ac56b77e4fe4aa1a487117bf31729116acc4f449cedb06ecf7cf3329fbb4e17bb966c0defebbb578fa844f96
- TLSH T13E4124902AFD01A4F3FA9E76ECBA671188BBB8966D70C59D4850820D1832B05D5B7B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.