General
- Target DOC-76EMJU.zip
- Size 864B
- Sample260804-kbmxwabj2v
- SHA256 c3687c387046d01f30874b6e7ae6dd4c27df3e9307e3b5e8f61f045259246115
- MD5 a6cd02511f33131ad9aa4ea8a3027dd4
- SHA1 7b7af0267337f6ba368b3345630b0a71fe528018
- SHA512 7e7d6b6da9c7157751689f4c5322a67d90c277550ea0b901a127e23c41daaa054dc9411160c4075f4519f46ec8aee525404b0fba19c52a7d5a3f1c87e039cb2d
- TLSH T1441186B7C2BA16C0D6038433BD4721C6F3761006C22A3ACE36ACC149B0B3C609B4D86F
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-76EMJU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-76EMJU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-76EMJU.lnk
- Size 2KB
- SHA256 1d81b36f87c0c2b691712f3e986d659cc1e32fb3273f82712a9b3cc75be415a0
- MD5 c573681f3e40afaf518050646edffc59
- SHA1 654089270c8f1aab3b9b0149681c44f4093ff0a5
- SHA512 019379af79fa0ec452d00e5165dc34e41e5f736d471dc6a2cbaadbd40daebfa14e52b4bbec5ef9e7cbff4a09510316cf359cf280ab48788c1b6653d919ec6e84
- TLSH T1FA4178903AEE00D8F2BB5E73ECFE675085BB79525CA1CBAD0840810C0572B41E97BB27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.