General
- Target DOC-WQPFX1.zip
- Size 583B
- Sample260804-kf98za1tex
- SHA256 d46c9457bc88c1632cad8258b138845abfc5a82ff2a6e5121fd55c225b5ea487
- MD5 50a426bd03aaae72ffcecbe426afb81e
- SHA1 d82eafedc6d8e9e404394da6e697531497ee4738
- SHA512 843b500d3fff0a6598fa3e5510daffb1920762253d11f168c45d1f5ef1614b88ce54c475e999949c62c18f1f67b59ae784d02e18ca913d35bdbc1602bf7685ec
- TLSH T1E1F0EB5A076EC0FAC40FD33CB3D86232031C2672066B18BB3066CBAE1D2918C1C68AF0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WQPFX1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WQPFX1.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-WQPFX1.lnk
- Size 1KB
- SHA256 19ce7144f27149dba7335ee981af6f370e66228b00f88c344bf30d4402494991
- MD5 c97da33d11b9238051878d0a5e1d508e
- SHA1 77458f3c2a5e265a30544830692412db1b8fb953
- SHA512 b979273c9a95b9049990927aad195e2491d2d9f8db53948abc51e37e2370313b16ba8de56c05ef9e4508c85c85031584b1e8d6d66eac100b7f031f27f9b5b0f0
- TLSH T1E83147502EFD0624F3B78FB694BB572485BAB8558E20CA2E0141454C5072A15E13BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.