General
- Target DOC-JPLZYJ.zip
- Size 586B
- Sample260804-kbnt6svfrd
- SHA256 5a9a09bc71d1c03236a49bd94a4857f6b82fc1e9700ea726c883dba61fe7ec37
- MD5 fcdef7dd43bc2b75c84319f9edd31d72
- SHA1 9c7eb7b6614fc64eb1a0886206fde562cfb3e132
- SHA512 a708a4396fdbfcfe847fe5f5a6a87400d105f8ee35025de4d85cfbbfb3c17b85a819bd8a03ce08d48cd7b55b401a1b6e06a939f1a33101bc908ac01677adc16e
- TLSH T13FF02633416FC6EDE35554F50E09723705BCFDDD0009091E4026E48B5C158B79B3B1D1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JPLZYJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JPLZYJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JPLZYJ.lnk
- Size 1KB
- SHA256 9531697e3c87a89b68dc3e6d07d7ee9ff76a4dabdc8e034bd42fc2c23a927475
- MD5 a33059fdef7997c7ceeef2d74d627930
- SHA1 fa340f0f92ff3952c103d337ed5287f5dfee31ee
- SHA512 8e943b8e4970204163e1d1450ddf2d30933c4c8cb3c8a824b5e2c2d94665ed2aafe647b99776a12b32f23d45798af980dad6864557384371103a94f8a74c0fc3
- TLSH T1A53197102FED0624F3F78FB684BB5B2489BFB9A68D60C62D0181450C5432E15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.