General
- Target DOC-QPKW36.zip
- Size 836B
- Sample260804-kgehpagb73
- SHA256 26bbefef7ecc028554af5cab37f61a00bf316037a6bf60866ace7482a0f740ac
- MD5 d4196b9e9d19fbfcd01ffc2d5d4c90a0
- SHA1 a0dce2fee03eb949b9d3ee8fa760397b1a19eb8b
- SHA512 8541933f157f7a1d261f5ab6ce48ad7c91358eb05d6ad63404eb7d2ac9a2247d9cc7aeebada147d1013318893450a1f3822e36d04c7974dd30ced25c6d994253
- TLSH T11E011206B7098FAFC017E8F8171B779412E517F1036B9282A435D73C65E0610EB07E1E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QPKW36.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QPKW36.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-QPKW36.lnk
- Size 2KB
- SHA256 c6d3eae5087f4cc4af250dc309960d331555f3810ad94ab5894a57219f7f5335
- MD5 7c761c3c62adba4ef3f709a64a11b548
- SHA1 166ce43f5bc32a7fff1049adc30ef87cbd30a1d6
- SHA512 fd4ebc16e199164eb626955a8c18521f2c2175d81a29543a37b01b5d4702e2b49ed03461d5dcd94a75d827dbad1c2873ae5e853edcb8185af000e6e10acf92d8
- TLSH T1024176847AED05ECF3FB9F7299BE2B04897BB8515C31C29E0840810D4422B04EA73B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.