General
- Target DOC-WJ1RPS.zip
- Size 588B
- Sample260804-kfpl9svhmd
- SHA256 138432e41a18c85b3a3b67a2241177ea526d971355a8b2ff6ee892490f631a7b
- MD5 eaf90f12a845c058127ec7c0968572d3
- SHA1 4e9f00fcb18860edfaa1ca01ce84f3fbd5399a72
- SHA512 de9834d9f8f1ed4a76cdf1428ca6d3afbe255fa4d1c4c6042b91d885a83875ad8c484d7cdd913f5a9913f381efa88fd66b8a28293beaec21495208c7a7f26dd9
- TLSH T11BF0E167546C8186D382D039B3D27E734F3988625827725C7789D4020CA9CD95B26471
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WJ1RPS.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WJ1RPS.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-WJ1RPS.lnk
- Size 1KB
- SHA256 f6aefd34e1f5fbc81d62a1497dbc99d2ed5cf2292afecacbea10a562daa9e143
- MD5 6113d608385fc67dd6bd7b4c6149c9b3
- SHA1 b4ee84e636cc9c9e3946393288aa7fc569671829
- SHA512 df8667919cebcf29ded1c48b35dacc93c1c130738ffd5e8c9992084d6f0996cbbd64dfe1391389eb52764c81fb41ee07244c716ce5942397112e6b7eb10a1563
- TLSH T1973197402FED0664F3F39FB384BB572089BAB9A58D24CA2E0040464C1022A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.