General
- Target DOC-4B4JR4.zip
- Size 871B
- Sample260804-kfvtaa1tb1
- SHA256 3ad6df27f9fe1e4ce650a5537b6973f7a873de3a5f5a112299e888c29464f528
- MD5 d350081319db5e462a14fe0c36759c2b
- SHA1 3902474031288c0b910b0438ad4e9ba3819fc4f4
- SHA512 b74f4d545634c7dfa4c8b3391264728303ee945bf68672975da39492c7e8b0cb4f3119a7ffdb576a9533dfcc2a773baa4619df4dd865b9c2692d384f398209cb
- TLSH T1391156FFCD662AD6E2C60DB2DCA49A1F90AC6416564DA542F40CA705951398547D2144
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4B4JR4.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4B4JR4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-4B4JR4.lnk
- Size 2KB
- SHA256 9cdae74be9bd4d37c166eee1da434f2767e8bef4565028fffd551c0d5bdca6eb
- MD5 6b8ff1bf57fef8fd8bd1b80aa28f8f20
- SHA1 dd9643b6a5ade6555a9ceb87cfd262d95e6da217
- SHA512 55e06ff47a18349120c6afad220265fb3ce45df7a2ade289568d1711aa4b0c53077271cecada9ccc506b26fb7ac8975735e66c77eef713ebb626eecd977800cc
- TLSH T1E04171803AEE51E8F2BB9E72CDFE3741487FB8625DB1D58E0C10814C1422B04D873B66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.