General
- Target DOC-ZK99TK.zip
- Size 1003B
- Sample260804-kfj2savhlb
- SHA256 0d918ff674e82f21df9d6e871a432c1dcd9bc0d2139020cfc1d79285bb2644d6
- MD5 87244ad23a2d4eea14d00ff60c24a4a5
- SHA1 7790bbea5f26bed81c8ccca73b778148b6a431e3
- SHA512 d8596a2cd3283f51413d21b6cd1c8d0463f8a49ab1ededb9e9ce8b8212fd17b3eadf46a6f6fb248e089f8030a4e9f9965c29c9c7cf66575524e3fc03b34e273c
- TLSH T19A1198D11B5F49DEDA05E9B11632A6432D943E50DF1B33D6042C539D0A6B4246D0B764
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZK99TK.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZK99TK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ZK99TK.lnk
- Size 2KB
- SHA256 d356a6d1ad524c539fcf132c4527cd5aec967b08278367aa6ec11c562fe8d5b3
- MD5 b26f743c4a82abc27b4b76d743369678
- SHA1 17e4efc94776c1689812c88885a6b44945340ae4
- SHA512 01a25a09860b017f73faf9f8289511841c025e4940273e7384caa05d40798c1c36c27c9e7cb55364fbeb60ca94bfa4ecb5912a792b856d7710805c7368c7195b
- TLSH T180518B902AFE04D8F2BB4E76FEFA3B95887BB8215E60C15D0C40810D0822F41D972B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.