General
- Target DOC-0ZYCTE.zip
- Size 593B
- Sample260804-kbss5az1cw
- SHA256 a87c7ae620bb3d822aac8edd970555cb6f97b84e15d804dc9515b142dbf96903
- MD5 bb4ddaf2da058c5cb3cc0d9e0d98b1e1
- SHA1 80b6bd5fcfc4d19b14faf311fac2fbf97bdf1265
- SHA512 133dcce5c40ed5d1f76c10f0829a6a1108894cb42f80891720dd40cc9b8a4a409c5c32eaee83b6613a6b95a809b5716641ae7d9af1ea1cf132b59b0d5ddaa35e
- TLSH T151F0412B0187804CCB4B8D7441A7213F074E30E76E5EE79223B88083A888A5CB6B9E19
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0ZYCTE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0ZYCTE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-0ZYCTE.lnk
- Size 1KB
- SHA256 3e87528befa9f0e7e18fb7775c04cbdfc66d4adff3529e28db5ab4adf90250db
- MD5 ed4cf9a4333de3041721d5786f18f889
- SHA1 da31e2c16de05ec52ebf05d5ff8454872b932948
- SHA512 d42acebb610a35c051a687363da7fa9a74e35bf2e0248d7b45b4720c7b3ada273d9bb68fc7b6a959a8d3abb12c4eab3b48b4263b643e44acf9581e322d2f0a3d
- TLSH T1AA3147502FED0664F3F79EB794BB672486BBB86A8E20C62D0141454C5072A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.