General
- Target DOC-FZH7D0.zip
- Size 581B
- Sample260804-kflklsvhle
- SHA256 5b732e3c6b504357be43e62df4027ac6c2f1f17a69ef1338db79a614ac9f575a
- MD5 8ded370d29f6c3abc003278613f9ea22
- SHA1 bc149c81ae23b99041d96232c3f1f85aea2cf5c0
- SHA512 3a17ee2e050d4ed1115a0b098c4b4ec0859f92cf49c83687aa5c96bb7d667c2eaf66b0318e9e55838ccc6943b5f8a7b650a8e35c8836058f8cf26a7a8ec4337e
- TLSH T1EBF096B1D31533E0CE0C84F0B8A2035462646173407F8F66473EE23728A5928ED89170
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FZH7D0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-FZH7D0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-FZH7D0.lnk
- Size 1KB
- SHA256 b0c5110c3eec35d8d3e4cb12ad7cfe2a6610b2db1754945dadd8d36f576d8d02
- MD5 8bbe561c04c329ef9f5361d89a86a534
- SHA1 303e908bae41ae88925803879bbbda6f3886b925
- SHA512 493ac1335c45ed04078ddad72e5bb53adbf855112f8004f5e0d8da65b5ab730c4cce42e188e22ec937180c59ed896c013ca00bd545a25698e8693a4dda6bd97d
- TLSH T14F3147502EED0624F3B78FB694BB572485BAF8A58E20CA2E0141454C5032A15E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.