General
- Target DOC-EQBJ7I.zip
- Size 852B
- Sample260804-kd1xhsvgpa
- SHA256 6563bdec150c35ea02783f4f5cb4fcc2cb944b06cad2c889b9a849b48f678c76
- MD5 bf6527ee2fe0151d1a49a6ba7c298a5e
- SHA1 949be179d9d7b9117c92325e25ae949dcac8636e
- SHA512 cb7ef0943a852d244983d12dafdfd45f23a862608ad1640684f08ce912aae48883001626676a2cd7d1b39575745c0d086231351ffcf8fa4c17438db15fb6235d
- TLSH T1F70152E3D1928545CC86CDFD81311785F0CA20F2E10658FE9C65C26616FF644974AAEA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EQBJ7I.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-EQBJ7I.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-EQBJ7I.lnk
- Size 2KB
- SHA256 2f50913a37990fc13f7a1e4d12608e6b8ade3ea491ac3d1a7392445ab3965e05
- MD5 285488d1cfa8e220197a8835285fcee0
- SHA1 ba5901f0665e7293281475e416a9a551168d18e6
- SHA512 4ef8f6eaba6a1fecb76582f6fa22862578e939d951624d424769c6ddb29a838506ba2ccdc9492c4f8b36e32efd2fee8a8d1d49d3732e325abc51d3077c71506a
- TLSH T147416A902BED01D8F3BB8EB6DDBF634448BBB8624D65C59E0841814E0432F06D977B66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.