General
- Target DOC-QEZTKV.zip
- Size 973B
- Sample260804-kgxdha1thy
- SHA256 84a848955436e69e0385a1c8087cb8a087cf540b9bdfd7b5267bf05fd72d885d
- MD5 1e9122b1c6c07a2239a42e9ce300e6d0
- SHA1 ef1653652c6b74463ed4c40f2e103cb0bc07ab1e
- SHA512 22e0c10d54d528393e65b0121613d098d2ac49e379de4359b46be9ab966b0d2d87753ddaee6c50c289a6614a3822d9ba28d0fb6d12ccf00246afa308ce9e493a
- TLSH T1891150C286E471BAFB06027410526E0E7085D3D8D2485A8FDDAD8AA4B4AF9C5299F6A0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QEZTKV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QEZTKV.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-QEZTKV.lnk
- Size 2KB
- SHA256 7913f959c5292fe0e17777969ef0dd392c7c4ddd2c0ae6e58ffd27cab0a8d5db
- MD5 09a8e4bce0a7e851a898420397137d2d
- SHA1 a8800641d2eb437814c05ec177cd69a39091f499
- SHA512 a2c6e35c6e3dd8713e5fdbe93d6f407ae010930740cffb6a87c2397ec1378863c1e9b2e5a2725500d06f0daf21875b743a428cd2e50cf2a6addf215fab5d0375
- TLSH T1C85149906AEA11D8F3FB8E36EDFE2795493BB6A66DA4C59D0C50C14D0822B00D473B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.