General
- Target DOC-ZJQJWV.zip
- Size 931B
- Sample260804-keze3sbk5y
- SHA256 018535e13ab9706e8754a6229768a5e67b7f5129a8f912032be31568ec83aa9b
- MD5 c7bfa5d555c166bf79b7c3d416b1a5a6
- SHA1 817ef2bed67bf4c0ee298091e02f078f0e6b0bf6
- SHA512 698e919c65f2fb71517fb3dc6daf8a99ee11c3ed12a4ae821b23aae9bfadeaf0482c9b9683bdbccf211e3a2831053826ee5cc35f05fa230ec6c36e16d18ba4c0
- TLSH T1D1118820860F6919C701443839623596CE327190A10B555B583A995647B33A85AC79A2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZJQJWV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZJQJWV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZJQJWV.lnk
- Size 2KB
- SHA256 50a0b28d57525cc9ce8af674bfae6a98d64dac58d608e784ff4b8e0a8126fe27
- MD5 c65061c5dec3dd461762a84ab2244e0f
- SHA1 525c3f821ef2969cae6976567561ad75ef2c8c7c
- SHA512 19eae82998eb414563e25a9d621edf2d1e1fdf870cd2982958c2d0c5e6b8552f784fc74e0cce956b4bc34377d879c5c116d5c30b21fcf61e648c4ccac04e2bde
- TLSH T1B54135C02AE901D4E2BB9F32DEFA23514977BD525C70C59D5841820D0822B41D977B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.