General
- Target DOC-2KQ3M6.zip
- Size 591B
- Sample260804-kfknbavhlc
- SHA256 c61b3ed7a4634a92996bf92eef99faa44c8bf9de0cca40297659d229fda8dc17
- MD5 ac84183dafab11aeee5f86b9fa6a77f5
- SHA1 bcfe5f10d0aa3fb382e8f9abb552f022f947edbe
- SHA512 2ee0dd97f6f2b8dc942cb1f4c1507b7466f37644ae5ed3fb73a4669e1cffdb5bbbb1bf1cbe445d495a19b97d949f794049fcfcae7981910df4402ab5dc4a8e0e
- TLSH T1E7F0411B33880135CC4B8035240BFCDDA9F4E0E05A52C3A6A604DD6351689E2FB480A0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2KQ3M6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2KQ3M6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-2KQ3M6.lnk
- Size 1KB
- SHA256 e4cd632c1c517d71b69eda507aa357d2826e4aedfa386ce9f9f61ebd1a663cee
- MD5 9d7539e565603be0f5a439f82cf4a284
- SHA1 4f53855dc1d8b42aa730afff1e251c6261ce0a2d
- SHA512 65a0cafda26d265e636133897543f64941b4fd74b7dcf8bcbc9ddc69579607ce6e1fde63ff9293b991efd4b89916cec2e683cb5dd4da55be7fb328d4675af587
- TLSH T18E31CB103FED0628F3F39F7384BB572485BBB9968D21CB2D0040490C1036A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.