General
- Target DOC-3DEKJF.zip
- Size 947B
- Sample260804-kbnt6svfrb
- SHA256 bbe00d2bd2156a292c04ee95d31ac504931ff50e321d7ab3af35dbb54c0af865
- MD5 7db1130162893ee367b340f260869b7c
- SHA1 0b50ec500112bdbb947976ee3bf60d1b796b190c
- SHA512 3b186cc7a82decfccc681f56b21468a85bf46ec6f5f2783295b7f379821dea8fe0ee048aadac4c10666394a1a3dbf557c34a3d85e5ee5ef054e8a5f8d089a4d7
- TLSH T1CA11C432DF7417BAFF2F8CB3C4B026015E67A494806B18AA140FE2682DA61A00F113A7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3DEKJF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3DEKJF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-3DEKJF.lnk
- Size 2KB
- SHA256 f7ec4e3cb328c76e4286e453ca84072a9f8ef981fd7c21c24b07facba0ad5093
- MD5 8b9c7cc687d450d6506210f227345280
- SHA1 ad531f724d5357f763c98b79de0dcc1c6df10838
- SHA512 20d23e7192c9223c47ecc9f7fd1eef603d5a72410ca612cbdcecbdb5729ba248321e4daad85c1cb6e644065031a23f595bbe4a7f5ac0ccf7688e14405150efb6
- TLSH T1BC4103803AE905D8F3FB9E76A9FA67514CBBBC669D31C68D0844820D4422F55DC37B62
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.