General
- Target DOC-8JYCZD.zip
- Size 911B
- Sample260804-ke6jdsvgrd
- SHA256 32f68225c05f34b525b744b9cc0e845ada2ef84e3bfe8bce5463781920b1b16a
- MD5 a42a607dcd10044a9a1d5a659e84d3a9
- SHA1 c4eb55505bc0a56ccb300deff9d2b2761ca4c110
- SHA512 52a5f1a8e3548a3698ac83024423f59bf14c121536c339bca985fb5a39c2fa9bd6bc3e5ad9831a13e16b8639ac06b1340657743ee97bdd2d5e18e9f5bd90b2d8
- TLSH T1EC1167D6CEF90461D00BC1F561647D17657D1B49C401022FE21DA68F59A546BD908F34
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8JYCZD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-8JYCZD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8JYCZD.lnk
- Size 2KB
- SHA256 4c38b8c1ad2c09c6c66f8e4c48ffde6b8bb9338dbcf7cf4fc09f5f26f30d617d
- MD5 1bad3f8d8c1ad5352e6a53c7ab028f5b
- SHA1 e2176bdd7451a7e0b5d4c0ec905413bd210b6397
- SHA512 12606adc96106de042605db1210b6320923eb545e59a0b29714fd7d823ee4e1ce9747566a5613b88a2980a2031a196b8407e798d4d99c324032c8876c9060e02
- TLSH T15C4104902AEE41D8F2FB8E72ACBE672455BBFD565D70C69D0940820D1422B01DA77B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.