General
- Target DOC-NX8VYX.zip
- Size 920B
- Sample260804-ke7rfsvhjb
- SHA256 1c7734db3e386f6093b60070b72809a2a5bd079153a54cdb9662b3825c9ecb31
- MD5 79bf579d2e865d2ae5e24f9501ecb7ee
- SHA1 ffe03be61e506daed31d7968fbd6f0391eb5f32a
- SHA512 e39c4dab39400d73fdf97f95adcade150ac5f37e5c85d1f990183477f0b7913131eb5c53c00c3ae1fad8b0da670d6b240e51b13c18169457168559f68a4e67e9
- TLSH T1C511B70B68294230D1896AB2B1B6072D06D803D1833F291D841C933DA0CB6C1B78B7C4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NX8VYX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NX8VYX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-NX8VYX.lnk
- Size 2KB
- SHA256 0583ed7f39fa99a6a67ebfacbf531ffc5aa548f25fbc50ecce43c45e0b442d2e
- MD5 f6449ae8433b137c6392bcb5b65c56f8
- SHA1 403d021a2e579d63725f30ef6d89b070b39cf23f
- SHA512 30abae3d97d0efe3209f5ccfacff3e8ce59860af2c7017ab5b530424ee6a7afba25691cd1372f42b1035a440825187bce20f346b0e99948106f8180796ca39d8
- TLSH T1B94146802ADA01E4F2BB9E72EDBE67114DBBBC515E71C54D4800820C4823B00ED37B37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.