General
- Target DOC-CKOEWC.zip
- Size 826B
- Sample260804-kbmxwabj2x
- SHA256 dea8923d6fc14ab51da124bea6e96f3bb1298e705816f75f3b5aa79b64cb36f2
- MD5 ddeade0560e134e69b63f7c115185cac
- SHA1 67d7cd8eea70a61597cdf878e8e3bee78d231c13
- SHA512 0fd2b311c263b72b8ea1bdf9046e1e5251f81d2c7161519b5b5c2ba4d09fe3da7e44f2bf5f652e53ef007b68bfe000569b8868136ad759a2f9b7a709200824f5
- TLSH T1070146725E501246C510403029FD16D1A8A7E42204D39D2E5B21D6F42EFD3F7E7B1D81
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CKOEWC.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-CKOEWC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-CKOEWC.lnk
- Size 2KB
- SHA256 179c46fa95c1fb2193abb2e79c4436e0b7aadb71580c27165025c40d289aed14
- MD5 fafea82818c405e1dfef51894849fb69
- SHA1 669cfc1865984e7d6987ee3958b1e2021fbbf52c
- SHA512 28233f80e7e9336a8b87ef8c6ec4804cea2148bdf4ff3e360bb620dd85df73bc5c20c07fba7d1c9883d6b22efb096098bc40afb583131182262e12049ae96205
- TLSH T17C4164803BE905E8F2FB9E36D8BE27504A7BB8015E34C68E0490810C1933B14E937F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.