General
- Target DOC-ZDJBBO.zip
- Size 588B
- Sample260804-kf28cs1tdv
- SHA256 3091c1928614269be832caafd008d696e2fbe289013eebaa0a69449b2fe3f4a2
- MD5 b9ff21bc47bd0a3a0ec09a95f783feee
- SHA1 e52109627c25e52d79418add592dc5576b16886c
- SHA512 1b27cef870b598bce06ec108629ce017a968ca7fc32644c2f078d73973e24fd6e1f8ebc3921903d3196993f6dd21277c4d24c747883bc3136f0f3161d77696d6
- TLSH T141F0207B91685E2BC22CD3F94EB343718A2C922A001D29470276CA4239102311EDD5A1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZDJBBO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZDJBBO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZDJBBO.lnk
- Size 1KB
- SHA256 c58d301f8a738e22564476e223ae42d3ceeafd5b1de2d089cc9fc48bc327161b
- MD5 879b4504862cdbd3221e2291bdd1a200
- SHA1 f4fc35aba25982c5233989579506a988df00a27c
- SHA512 dcbd3b638597c1eb2238fc8ddf05d1205fc68252a1e4f2bf0d15ce7bef32e8357e5867e4087c439f194b46280a51d90f3fc26db2f6a5164786d56c09b76a05bc
- TLSH T1AA317B507FED0624F3F78FB798BB572485BBB9558D20C62E0141454C5032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.