General
- Target DOC-9Z4O8U.zip
- Size 595B
- Sample260804-kfcygagb62
- SHA256 c194db57bfbcc922806878d89e13062d5c2749422b926900d9fe56dc946859e6
- MD5 460e446fb89f1b167999c33561c1d397
- SHA1 6d091e2f5ff5ed709cea99f42a132129105de018
- SHA512 3a115dfdaa27120c2ec2db80c182a12fdb8ba6d296351a4bb569d130563b67eb73a5266783a7212d5cc4948d3b346437995fe687930a7fa276cabda25563cd62
- TLSH T1F2F041B282060803DAA2A2F414AB2A0713226DCE004B79628AF0F96D1819348FD7E970
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9Z4O8U.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9Z4O8U.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-9Z4O8U.lnk
- Size 1KB
- SHA256 da01bbd9691089baaf9e82a59825311663aedc239061ce1b2f0ec528689e9139
- MD5 369e246e7f8600f0d7cb8f9bf0ea0814
- SHA1 e3acb947cc2186080dde50961686a9bb2add0b3a
- SHA512 33ab2e442ecb0a2bdd0b5d45152a511d9452747f636ef5349532fe2e82a22d470ac2b8d804de99627129ef315a689efcdb0b90d428c4255227259bf8121939c8
- TLSH T156319C403FFD0524F3B78EB698BB571089BEB8558E20CA2D4040454C5433A15E57BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.