General
- Target DOC-KZYUZJ.zip
- Size 943B
- Sample260804-kh4h7swand
- SHA256 3c24eca991e107282753850c4d14a9eab014b4e40f88ae1af215a68842680c5f
- MD5 65ec3ca768da75fddc169f9ae4b32717
- SHA1 0eb9e55860052ccd0380638a28eec2b88856c4bb
- SHA512 ab826d906506b546816719f6c6f46c5fb3e8d11b09c9299d8e4f640e52bb44f1c70f94dc6d6ea3e78b5ce7e4f6abd1b95721c482c4d042b6971fc67142b2a898
- TLSH T1E111C85A802005B3D292C3384D73FA8D791490C24CBC70073A651507181F14C7FD5D7F
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KZYUZJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-KZYUZJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-KZYUZJ.lnk
- Size 2KB
- SHA256 f7ebcc57742cef964f85d265c7c2f32dea5da337f4950aa49f7ccd30a194c395
- MD5 ed03c610dd1d20d5d10d772d63a3dcb4
- SHA1 5a8888682ee358287ff24096cb956c0e39d24f1a
- SHA512 f4cb56be3884a3eeab8065beca23e31a437b94ede007e46fa053409451daa87bc9f3cd5174db24a7121232fe9c3d57f775cfaf125c35d4d76afa00380620afdd
- TLSH T1455147417AEC00D8F2FB4F76EEFA6B9045BFB8917EA1C69D0C50810C1831B00D57AB62
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.