General
- Target DOC-A00WKJ.zip
- Size 585B
- Sample260804-khjh2a1vbw
- SHA256 df1530350672fdc93fde89e73491c5aad0e2314b1778aed3925439969c901acb
- MD5 7a784cdf8ae87ecec3e55c7725a42cab
- SHA1 f8c8859a689c65d32d72ce29934742b108bf7ba4
- SHA512 e42fbc685fc83367ec73834295ac788b703eddfe68e8194e1275a557a66a5e2fa6de20eb890d4c2b9a068d9bea92107c6fdcf447416e49160b0f599bb52a6c1f
- TLSH T197F0E17903048ECECA56847E6472E4D35698F990154B1AFAE8BDD1192C151C50ABE094
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-A00WKJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-A00WKJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-A00WKJ.lnk
- Size 1KB
- SHA256 f7f746df8b86126fc6a624bd60201feebe7dc21b1ffe7ee4cabb828a52070909
- MD5 ad2cc4b24867446c7f776f132c1bee35
- SHA1 515ef8df2d662fea3d68da3c42878861134b9d8f
- SHA512 a1d3fed32bd9cab02450b3f9505682bdc4b416d08a7e1ae00782c8866bd0b14cef441284cc42e748abfdd3dda3e32dc9887e76e6818f4b1e034b63065a6001a2
- TLSH T16C3197003FFD0624F3F78F7285BB572489BBB8558E20C62E0041454C5432A15E53AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.