General
- Target DOC-6JIYO2.zip
- Size 588B
- Sample260804-kf4fesbk8z
- SHA256 9178dae3f9b4292c7e3ce439b4278306885c3d61bca4d9713f71bc66637fa1c4
- MD5 d532a1bb3d2704bd8b794b8c1b01feaa
- SHA1 9e366922b7b2d1a5c264d8cf43f1253252d0e51e
- SHA512 3530b0fc51342d7b61d40a1ae0f813a5f21a84f861252fc56acfe637586ac0e7e5ffc28f48c0504a74592b9fa1a73df64dafb3a2b1a7aed5fb7bca36f5c6f399
- TLSH T13AF0E1DA0F38044DE18874FD745A665628ED8CC44506D80D1668E4180CD22627931FB2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6JIYO2.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-6JIYO2.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-6JIYO2.lnk
- Size 1KB
- SHA256 45a97b52156e17bc387547d2d87c042ba4277ff15b0d8afa3dd19fe7a4fdc8c8
- MD5 b6a9153ad6d7b4f3bf424bdb90c68357
- SHA1 f5ee708d19dc3f54181896c5c11bbad76619d967
- SHA512 9ae9f97153595403fdc7493b1846434c9eca043def5b6339052eb209cacbd3dcc268b95e7dbd5485b42fc11477adac64b9e420ee75773673e4b38dad6b0f25a6
- TLSH T1CE3197002FED0628F3F38F7394BB5B2089BBB8A98E34CA2E4041454C5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.