General
- Target DOC-NZXX6O.zip
- Size 585B
- Sample260804-kfdvrsbk7x
- SHA256 61743e38d1e4f783a9cdcc395b66ddf0e0b52c006d84b9c0eadc4b16fbc7accf
- MD5 789389f1543a44bbcf46e5d01703133f
- SHA1 45515858ead3205bdaf6416b1f5d0ccf0d716588
- SHA512 decd3e99fd6e1d9afa2dd6d154b139dad81fa4832de1cb59ef17f13cc22b794e8755a6890a36d7fe173993f40f1d15eb109b38212bd4d999b264217d4575a25e
- TLSH T16EF041A2039B5460E12A1CFDAE1C210C101CA893B403B3CDB2CEFE0F88702841CA40C3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NZXX6O.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NZXX6O.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-NZXX6O.lnk
- Size 1KB
- SHA256 50982ee5d46342929447025f412805bbdc4d7613f7bb24947485c7208fa24bd9
- MD5 e6b4d16b468b8b2c6c20f24d62571973
- SHA1 0d8660bd40dfdd7703aa6cd8fde2e6c1b677fbdb
- SHA512 96a3c6553884e9f547fb9dc62b021dd5b6db05270f88111babe62c00adb7622f5e7981e4b094f2c50758daad8a917cca39f8e169c48dab9822db2d46080d80c3
- TLSH T1EE3197003FFC0624F3B38E7784BB572085BAB9558D21CA2E0051450C1432A15E13BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.