General
- Target DOC-8ZKBWU.zip
- Size 591B
- Sample260804-kg6bea1vav
- SHA256 baf01a3fefe85b65132a748aaf6d5f8bab6345e4b9344daeb687f4368aa67f66
- MD5 d89528bf5a3d7d9b779c57b763b074f5
- SHA1 ad956436dbbc35bb86f44c4d718d2c7732e0d109
- SHA512 d576f42e4679ffcc83c947c0808e75ed01e6095e635eda93cb0ae720b10a65cbd95e33f01bf2108754cc3aabe2363cb637b7dbeeb0bf13e72bf39b8b519acc1e
- TLSH T124F0413789041011FB5311B3ADAD6CEBC9789445CB2E9C6B06348C835DB0EE41402093
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8ZKBWU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-8ZKBWU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-8ZKBWU.lnk
- Size 1KB
- SHA256 1716de0247c8a0bd1911f3437c0dec1700f1306a5661782dd3d4b43cfcfb8b94
- MD5 30fb94cc90d95f504f7b38a3cab9a5de
- SHA1 f3bce2a9bee588144cd4c9efa4abce3491a90ce0
- SHA512 66383aa7991e031dcc2c568177d9daee0070dcc32af94f83108c02223352fef03de3602de799c3f08d0addb0c15612df16176741f1d07647e9b947f353cfaebe
- TLSH T16431C0003FEC0524F3F3DF7384BB671485BBB9658D20CA1D0041450C1432A19E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.