General
- Target DOC-QEC0GI.zip
- Size 851B
- Sample260804-kfa4wavhkg
- SHA256 160cc4c01fe4b443002909b51035b3c3ec8487420db34607ac3db61834df0946
- MD5 def12084780ad8df92d60da17129da88
- SHA1 6617ff665d2125eacea1cef935a1957a98c2b19d
- SHA512 24ac362d754174429e1e933741a943a8c1ef54ff16d2ab3ecec43eedc65599a8f4799d3836768dba7857d692874e5dea3ee00a77d3f13496abc2799c4a4c5000
- TLSH T18C0192AB9282B742C4ECC03894F35395227B64661C06640A2C47EC0F3D386C257AEB42
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QEC0GI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QEC0GI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-QEC0GI.lnk
- Size 2KB
- SHA256 88bb8ffb450e760424e8d798dfde3a7f6d0f2871e468bd6d7778f75ff983796f
- MD5 dc22155622032ec6f4761733a6775fe3
- SHA1 a954f1fd2b3e42d88744334a5d2404373c50524e
- SHA512 be012f9c34be800ee67be6d40f1c769026cd3d8c59ab9df29b78d1eccb0ffd01618f4751ba09cbab9aefa8d858a090d8fe1c03c98766d7dadac4ebd482d839fa
- TLSH T1684127802BED05E8F2FB8E32EDFA57508A7FB8555C60C68D0850814C0832B15D577B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.