General
- Target DOC-JYNGLJ.zip
- Size 597B
- Sample260804-kf5cqabk9s
- SHA256 b748d5d00cfa105a3283d2d5319466e38cf1c691fd452bc1303ca94b15adb23b
- MD5 7cc3637387a7d100b77b381faf83756f
- SHA1 3dcee5b1eb850ebc7485ec6ee082d9e5c9a8e2be
- SHA512 e1601d82fdb18718ce62d4198a79bb320bbefb07f8ef8ddca6d27e60e9880cd993f65a9fcaf252f7123eaf0ac31d971aa20b0d5427cb37e6e19cd4a1c2afbf43
- TLSH T1A3F0473389ED894BCF0520F1D54F210B2435126314173D7E0925DA1D272D6C28B87F28
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JYNGLJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JYNGLJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JYNGLJ.lnk
- Size 1KB
- SHA256 4ebe3fd9d0670b9c3bca2a97324882ecd019cf48d83dc965a0365ec726ce97a0
- MD5 a362078ee7842646ef268f475dee94e0
- SHA1 6b7b9091bcde1ad087b65b35ce65fc8df85f73a5
- SHA512 e3af21f4ba1b1d23b470541c0b9b8e0ffd8f876ea1d054097460b59848ba2a2ff24badd53f1b4f15c9ca896ce6f3f996fa15c9a8423de0979af70f09e4d94c63
- TLSH T16D3197103EFD0624F3B38FB294BB572089BBB8A68D20CA2D0040460C5027A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.