General
- Target DOC-FO4Z6P.zip
- Size 936B
- Sample260804-kbnjeavfqf
- SHA256 cd9ed6c55f2d8fa926f9a6f38b1cdf8dc4ba162c4629cfc52ad30fa044604a61
- MD5 3b677819178ed686024a66f5e892bff9
- SHA1 97403144cb46e5a8d94b047c80f2d529339c50ce
- SHA512 c2d2a4cb648c50b43b98a02d057dc2130ad3724d760cf659aa3dc86f27b9842d5a5cebee3ae71c39dfe88105e94e90709238fec0f74492f08830a60732453121
- TLSH T1DD11B76BDB5AE3CAC59C827620F2543D4C1C622A861591611BE85D821919CCADB1F031
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FO4Z6P.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-FO4Z6P.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-FO4Z6P.lnk
- Size 2KB
- SHA256 b2871fddd033198c7148794b8f460d3db5f5b45e1ebf7c8583f2d69688c27e27
- MD5 0d0145552af7b9c8ba1f56e0913a1d50
- SHA1 cb27fe63c06949996ab663bca3348ba29a91fd81
- SHA512 dd1143e57e8350b3bb6bc97556be8ea88410c74a4e52c65eeeaebddec858d3a1ec3f1989bd9a935d97917b8fc4ba412c2afb74d15d21dbac710f200678e82dc3
- TLSH T1334156903AEE4098F3BF8E32EEFA279045BF78565EB4D29D0850C14C0822B41D577B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.