General
- Target DOC-JOMJE3.zip
- Size 871B
- Sample260804-kdnbesvglf
- SHA256 a736a6cdf383aa49599eaa76d7ae40c181d1d0a5f1c5881dd1824137d1d33f68
- MD5 74863b3268952e791854f8d510cda38e
- SHA1 01b858d8a989546886cbedba257643b7dc4c592e
- SHA512 d859472e9e80b4017902718d1cb8233856f0f7ed07c119933c7401bba722aad0519a4ff9abe3db6a030baa8d37cf9e6874b58e522fca2c9b49ba5fe9810eb544
- TLSH T1EE1196521344A90BCF4395F19C97BC6900607490090E43432270AD6FFCC4495FF94C34
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JOMJE3.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JOMJE3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JOMJE3.lnk
- Size 2KB
- SHA256 4c6ed5e2dc49a4ae5779a9de4617de39b34a7151cb8563a3b377c9c2125b1e29
- MD5 d46152dfb061c1b76780f892f02a24be
- SHA1 0eef3987f4e245cc51c627cc2b5586e1f518ff1f
- SHA512 d39a06451a383eadb493f0640fde76372488dd7a782f7d906eae3f76599cf42f26bb1e34d0a8bbb83bf8a10090d52ff58e6ce7fda620c8434d55613662a49dec
- TLSH T1A64138912BFA0198F2FA8E76ECFF2714497BB9594EB1C28D4881810E1426F05E537F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.