General
- Target DOC-6ZIZKU.zip
- Size 582B
- Sample260804-kel5ravgqh
- SHA256 088d1c09a7c534b932ad23c9733292412316bbe28b367a88591a1a1c84dbcae0
- MD5 be8babc15faf5ef32b78a04d0142f8aa
- SHA1 e6d1f3b3430720a132f965b758b584b0f5e7f3c5
- SHA512 c9e082a46a8cb0dcc485a152b5c59d5ee1c0456c2f84b1ca0bf378204138641de63f6b8003b2e45209544d414f03e4ee7d31ebf6b8f903e98b2dca939a839744
- TLSH T157F0E15C91190420FD0C647CEA4B9215828870D5069BCA67CDF0E56E6D584596A58C60
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6ZIZKU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-6ZIZKU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-6ZIZKU.lnk
- Size 1KB
- SHA256 4442e70f5d76582630ab1369083723bd020b6799d0e91b217cbc0d72f0a2fd39
- MD5 10501bf3614d036e8bf0f95a89195fb5
- SHA1 29fde8738963440feeba26464625d9d4c8cd6480
- SHA512 c58d25461321dbcad355b80c68cea7c3123d65b313297c3f190049ee6673ee7ac9d0f86e5d07f5b7814a382f18e3d949195f93c99c700e5b501b37ec8c75fbe3
- TLSH T18F3147502EED0624F3F78F7694BB572489BBB8568D20C62D0141464D5432A15E13AFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.