General
- Target DOC-XBFL9K.zip
- Size 993B
- Sample260804-kbqc1az1ay
- SHA256 e9c373dfa6be6cbc913b6a53c35c29cccf31c2a52f2ef5a27a64acb66849524d
- MD5 669c8bdfd667e878b4288e25d2bab838
- SHA1 e591ff745b0510c764e340cd99fd4a487670b668
- SHA512 27676b1aa48433f9b79fe2db654218e87ce51becc31a98a4f3df830dad6a2579ca671c948c5fbce53dfda0d725dee014d61b29909f5511b64529cfd307d4426a
- TLSH T1DA119492AB1D8885C7E0C2798D21CDC05B12A82203DE6C56E2D6F1DBD70D0EA1C79A07
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XBFL9K.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XBFL9K.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-XBFL9K.lnk
- Size 2KB
- SHA256 ddd6ee18a672caceaed05548db64a4f5ea22b63d7c7bedbec646c6fde0492b72
- MD5 1303ca45d297c2f1cb336dd9735a9c39
- SHA1 9e5ab0b2e8aabba9989b3537cc4b42da41ecc6e1
- SHA512 70052c37429c58f0fe77d366bfe4a18713f2669bd6b35c9909c55b2a6362dffa46e19a2e1fbdae0770d76e9ba987dbc5c699d39a74fe53c1b4842e009b85d7a2
- TLSH T1075124803AF904A5F3BB6F36FD7EA7914D7BBA226D20C58D4900810E0826F05D977B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.