General
- Target DOC-DKRMEJ.zip
- Size 993B
- Sample260804-khdb1s1vbs
- SHA256 193fa2d68c6c5223bbb71ca20a1d91120e73e64e6a651fda88a489c118d5b6c4
- MD5 13c94a9668992d206cdca887fc8c9326
- SHA1 69e5794ca7f8ac28c6ab06cc884bbbef0d6dd0f2
- SHA512 91754f2d786566544e3064239ac607b04c64c7229ddd250fbe5f2f7acc7d8bed67bc1f83b2d393ce7c3df0b71a6b2eaddfe55e211972b8f71b2fc33ea7ac2297
- TLSH T14A11C8A23BD3890CD098E564C7B610C5067013D71A7F66E709E8DE2C65360071CA3328
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DKRMEJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DKRMEJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DKRMEJ.lnk
- Size 2KB
- SHA256 321197268969da7eb78e7176bc973e99b67b2bf5abcc4441015aa79b52c3fe8d
- MD5 ab5cd944500b7c7b761da7db6484a5ca
- SHA1 4a16167e36ae87b4c90c5e8b9fd3e324c510e8b7
- SHA512 e513b80e4da2169e278be7e5eee9b4975bdb400ee2a581cb1dc15352d2a18069c453cace6603402205a997d8463b609f60621b80d294689bfb92f0b7a083747a
- TLSH T140515A902BE901D8F2BF8E76ADBB6B908C7BBD515D71C68E4401824E0822F01DD77B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.