General
- Target DOC-QJZ1HN.zip
- Size 882B
- Sample260804-kbmbcavfpd
- SHA256 9126c35be38235243336d9861b0519a735dd5d5f34b04f4f45c85d5f2f7b2ecb
- MD5 2b1f8450875169e3b6064fd5e413ee20
- SHA1 7cc61ba6f468e0c07af3c78356a88a07e5eb9261
- SHA512 76c7ff9efb6e5895970f26f723198c2c0c05ef0a76469106dddee2965e66d15beaf8e817d21494499a1e3f4cd446a38995178cecbec35465088fa4d45c03cade
- TLSH T103112F66C3314B89DE5AC131B5010990C89B227054631E9C25B4A9A816EF2BA4B4FA2A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QJZ1HN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QJZ1HN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-QJZ1HN.lnk
- Size 2KB
- SHA256 52a558ada334741a360a26556b5f9f6938dcc16d1cdab5a029b8b76148bfde83
- MD5 e81a59557fc5447b07233211babcebc5
- SHA1 321021c057650b0b1e5878d79b79bd40b3068ad8
- SHA512 3cdadef1e8ae7e8b9b04ba5bff56845b4f998928d8a34d7a4cab74e9ea835b4414a627a75967c9955c6bde11fefea7f4be2cca57bf344c2f3ef4f698beca0924
- TLSH T14141F3802EEE41D8F3BBCE76D9FA6725483BB9525EA4C59D0D40810D1922B11D937B53
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.