General
- Target DOC-JFU7ZV.zip
- Size 888B
- Sample260804-kefmzagb52
- SHA256 684cc5f2a7b7dcb74f60973caa99673695a96132d5e4f0b8c2a6f3f10d51a0e7
- MD5 ffbc00b6b071b3d83979e434ff47dcc7
- SHA1 74b7313f9731923e15096518e793c585db3bc98d
- SHA512 dbe7714065bd97036ac0c742314225d3ea1ce539464502dd5d89aba19031f6f76d426ef8a88c3532f32afd2e7aa24e8f10dab8439bbf972dcf939c7f32742137
- TLSH T1E5115614CD8D8C08DA504B7A0DB76FBA8A9DB156185116ED533CFC44DBD06875B44A80
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JFU7ZV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JFU7ZV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JFU7ZV.lnk
- Size 2KB
- SHA256 a8bfdcd9e9590bd8e0c8343f6888a84e32210ef2377d92fa3de03b5cd5e9f977
- MD5 b81543e9229e979d3d408f0a5d948be9
- SHA1 7c4062e9f6b7249a0e2f37e2b9bb54608ccfa1da
- SHA512 519534d5e1f66c37a1d3eb8ea7cd88dec3a3b8598c3e87f1e6a01322cf5f4f7e4f733a13e5cd2280c522074453a6edd340390ab780cc6ad759fb5f1a56a99e76
- TLSH T1B14147402BE90195F3BB8F72DDFA6740497BB8559E70C65E0941814D4432B06E977B37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.