General
- Target DOC-3837ZF.zip
- Size 591B
- Sample260804-kfer3a1tbv
- SHA256 2fd47b9f84a789ef0bf1aa4d81217d7971df2a67ce0ce5ea90de932a9253dca4
- MD5 04bd4d43f7558b2d84d04558159dfe9c
- SHA1 61b1fca114c10c94414344d707e2b04fadc6a832
- SHA512 1d0ed1c53e056895569476a3c48954514e183321afa4cf6952eb30bcb02e0a47f9b12054d130cd7daffef942c4fef1135d3e2228b71db839282a888616e8f63d
- TLSH T1D0F041AF2D0EA921C40940BC0F24902FC2C0E40A79CBC29B2F7858C65D886DA6282120
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3837ZF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3837ZF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-3837ZF.lnk
- Size 1KB
- SHA256 8ae2a8b3722df0f7fb5221dabd542ba7b55cc8a435e6371531d84c9aec4c9f95
- MD5 9b7ebf38206ce19e9ea937c9de730d50
- SHA1 a52ea5f1dc2651edced7925d5ccf59566ab1c297
- SHA512 bf8aba5654c555f2a6b41cf1048c189a36150b8e600f4b4d6435e3f305563b5eb080343db084f10a6c5fee9166063fbcf48c72a5eb9c5ac730eb2398fae05b7b
- TLSH T1543197403EFC0668F3B38E7698BB5B2089BBB8A58D20C62D0081460C5022A15E13AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.