General
- Target DOC-G3F4QA.zip
- Size 882B
- Sample260804-kd18aavgpb
- SHA256 c9de1f120dc838dbeb20bfb542dc97b07cc2dba7087066b5db1bcf3d979eb738
- MD5 7fc0a617aa38ad5fada0302e24eb2b0d
- SHA1 6e19b22ab51b237b52c235583a9601817ba95293
- SHA512 e78780453d0764375a10c382d54c33d07e7c1b93281ea9a7159cf429418024aa84698bad8c70f54b957c4f540117680c3b42bb399ff21dff22c671c946606cfb
- TLSH T1A61196B490A28016C1AE9536D493788CC85B44B948AA170BCEB8B41D91944B2E5E53BF
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G3F4QA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-G3F4QA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-G3F4QA.lnk
- Size 2KB
- SHA256 55d3d04f8e73302b53b87018a519b4addd499f641c349b627896c3bf62f88f1c
- MD5 130e03036023989e5ca495fcf0e74810
- SHA1 34e30ef54e0247d6aea9a1b22be504ba029b0850
- SHA512 9a738caacdd4e183f8c37ca720415e545bd9e792745fa636852c29f90a9c3473fa563c873325618f5e63ea1f741acfda4c9bae83e8618f271ef9ceb993284d90
- TLSH T1404137802AEA00ECF3FB8E72ADBE275549BBF8556D30C18D4450820C1826B05E8B7B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.