General
- Target DOC-JDKSWF.zip
- Size 809B
- Sample260804-ke8zhsvhjf
- SHA256 338007b3b35f55c123cee9f623969d7cab691166b14df5c0330eec9660c9b796
- MD5 d8f95083d6daa7d88da073f77f75c29a
- SHA1 19af701824e3382e68dd855b7180faaebc2d0ec1
- SHA512 09c7e043b1c03203af124c55de9b35235d8d9477d8d6f45282ec1417de2348160435edb8dd9ce9baa350845828dedb4591f336172c6568e99da05e5a92a08640
- TLSH T1D8017530DA47852BD53FD5FE1E7B62118B5A411E054BE911601AD48F9180D86173E35C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JDKSWF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JDKSWF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JDKSWF.lnk
- Size 2KB
- SHA256 3dddf525e210ec76fa01e786675bfee11b8866f2ef031593f62553622191c888
- MD5 f6044001c2e618b8ec9b543a13e7030b
- SHA1 e1cb9ceaa3c616df1e6ec5c28502cefd54be3584
- SHA512 8abd8855610097551aeafd2b1e7246ac8b263bb896826c331e019188a42499b19a23d24b6a687d693b5c0f3789ef5d93e823771c46016589164f2adc80684fa0
- TLSH T1B74168803AE811D4F2BB9E3ADCBB67108CBBB9A15D74C65D0450814E1462F06ED77BAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.