General
- Target DOC-JFDM4N.zip
- Size 962B
- Sample260804-kh2plswame
- SHA256 ae1748c2efaced415e6118f74e316cf0964a41538e1191d161ea9457605c61bd
- MD5 9c9ad258eb729923cd6468fa10f53b8b
- SHA1 308df7e403cb60477e1ca655cb1a5b582d7f50e0
- SHA512 89fe35b9c50e2dcb32b124d3f97e486266ca885914ed9c6c3a6b8c51aea098755e1e0f8eb8d2947a2af4bee592c3dcc79e0b48327f88710f06958a90ed6dd797
- TLSH T107118442C3208D00C056AEBAFB472186F04EB9E318B9A144B57D86E5A079D57CB6A325
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JFDM4N.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JFDM4N.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JFDM4N.lnk
- Size 2KB
- SHA256 5220a1b5eb298f12c29540bdad7a3a77b32e67b0dd529d6dbbf334ff5391214c
- MD5 3f2c4b60fc9ea5fa92eba4778b31fe8d
- SHA1 56d3af9e945f0f03ce3fa8db073c640ee0dbecf2
- SHA512 30977ef9b9b154b857155a52f0223468f9289c7bd78afac4ced6aaa894372bf3b6ebcc5f59eb815367c5f58e7bee95bf8706e89ad6bf1c7ce03ddb8107d7c681
- TLSH T12B510F8029ED10A8F2BB8E76EEFA63054CBBB9625DB4C59D0C40810E4422F41D937B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.