General
- Target DOC-EZWXFM.zip
- Size 592B
- Sample260804-kd4nea1sax
- SHA256 b3d9d458749f5809018589b56320027e7bf2f92b5fd31290550f1a33992bde5c
- MD5 3063828d5bbdb4c1fd4e3ee3ac5b376a
- SHA1 37d0d91d5e427999dfcd719e0b4a60b57ca53929
- SHA512 87bd4aba9ac61cb2b43b0cd47bc7891bcf4c259195ba06e74866ebee318bd452833d14f3818dcad8c5c939c1d02900b658e5a6ea523c0121694cf10ac6c926cd
- TLSH T15EF0417B5B0CE01CD46BE0BA40932BA56B52608A021C4379232FFF2A1C049A74F70668
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EZWXFM.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-EZWXFM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-EZWXFM.lnk
- Size 1KB
- SHA256 3c4445b927b27b8bddb6a370ccbbd16a1b0615768ff56951926f44eda6ece4d6
- MD5 db810c879545bbaa11d8ca7b4000b8d9
- SHA1 115cd9c82264071567fa9d6e9d9893a170ee72c0
- SHA512 99912ffdd9ea8391b30d830d9da028b52b2ad92d188abccb5f4d4f5eb145783aff2581d33e9e16d04ca8e635601323d5c6a6075e20c3085f8c16bd5b095c6b8b
- TLSH T10C3147502FFD0624F3F38E7698BB672485BAB9958D20CA2E0191454C5032A19F57BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.