General
- Target DOC-RB1YQG.zip
- Size 592B
- Sample260804-kbmxwabj2y
- SHA256 df80814c4f29aa2883b7bac3a413edf3b4d5153cf5856a4bfd024c1e7ef08a24
- MD5 d475de3e52523b5ab6aee182101cc01f
- SHA1 4504997a738361178c20a7f91e44c86535297d56
- SHA512 5a081c7c993a0571683075a19d397728ed06d948a7c8ef31e3f9a4245e250b4854ad736cad367a7305d07e527e3e411f7f2a87a75000a1ef5542399eedd303f6
- TLSH T1BCF0E12AEBC001A4C8A4CE35581E730B536A89855AD599CB3A5BC4F1AD612869C96174
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-RB1YQG.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-RB1YQG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-RB1YQG.lnk
- Size 1KB
- SHA256 440093e595ae00c2944ca2130724a2224e21ea93117a716dc56db3ecc419d1b6
- MD5 4185117ea63f0427005ce0e42d3a30d4
- SHA1 852d948d059cbf36db9810c2e7cc3acbbe083856
- SHA512 5b15f3a603688a44b440232492a31e555b3c511ef650dc6623a504abcb3b4e0d839688a09c61ff9f289ba367a901df58e34b58401fb7d36417b3c8c62434edc5
- TLSH T1F23147503FED0628F3B38E7795BB672489BBB9958D24CA2E0141494C6022A15E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.