General
- Target DOC-3FC0RJ.zip
- Size 965B
- Sample260804-kbnt6svfrf
- SHA256 c086b82b816ee02916f4097a226fdb459030bb19c5979c0243d55e5392b8c6af
- MD5 48d9c8c6289227920844144426c7177c
- SHA1 a831a3d6371282ccc6625eb324b910caeb216817
- SHA512 f1ea25b3a4c65f0155cc2bd7f1f58297ea54c52f17d48791b95b1193c4531df331639cd4cb9a99cc82fcafb5fafde083c43561e9b19b13d72c338d82b9c3f677
- TLSH T1E111C83ED9FD0A42F7C7007D26581E9DA9EC243948C6550EA50E51029E1FB4AA838F7C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3FC0RJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3FC0RJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-3FC0RJ.lnk
- Size 2KB
- SHA256 8be09955dc014152b1495f08f7ccd9b1a7478169c4bb555dd533fe5e46873404
- MD5 dc790913c30b9527c8c6243e890141e5
- SHA1 52b099713b01fbc6192a84c892fc2479823b81ca
- SHA512 6960046c6b1d73556e76476217ab11e96599f40073acb04a6b107247daf2b5155ef60ff0f6ecf649cdcbba6bac125ba32e7ffc22dd7facca8f2924609909dfdb
- TLSH T1D25146902AEE45D8F2FB9F72EDFE2BD1497BBA627D24C11D0950810C4822B40D573B62
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.