General
- Target DOC-NXAQ24.zip
- Size 588B
- Sample260804-khcqgswakd
- SHA256 3ec1215dcb735107ccb6d054dd7053d4d5c5f029df06870bcdab80b0637be497
- MD5 e2a8bbafcd18d266e02ef4ae0ed44399
- SHA1 7fe5002e3499b0efa45adf28dbf88503e477f319
- SHA512 c493d45894e29732b77500b31e854a6f31628fc650e2abd922ede94d79c4d2157ab861f3f964ee6985dabfb910f6e965d139007441cebfd700d9df13978b9a2d
- TLSH T1EDF0476F56390301D10E45B5A26377D40D06F51940CDCB9F9415C8D208DD0786B55482
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NXAQ24.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NXAQ24.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-NXAQ24.lnk
- Size 1KB
- SHA256 5356c0467a2aa62f0776e81dedd56c93813b626be7e71fcb0f8a8d484794c64d
- MD5 6251b6bb9a98d229e4d477624af82eee
- SHA1 0f125faf16b55c3317c19b3914bb47625cc3a584
- SHA512 b95b97a9ed6bcb9b3b0c1ef598c33f7cfa74c0509666cda9afb03891ef7f9a3998c212d48d73149a604b2d4a47487f20f02f62283a060fa5bdf867388974c741
- TLSH T1033197903FEC0624F3B38E7794BB572085BBB8AA8D20CA2D0041450C1832A15E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.