General
- Target DOC-7JQ84C.zip
- Size 583B
- Sample260804-kk7cwagc38
- SHA256 6e610b392b5997f47a56f4c9a17463285314bcb28f3b650d67a02e7af30d57b9
- MD5 2dc60c49e2db8eb39e386477c9f6c765
- SHA1 6f58b4c80cfcd14f212c0592911ff3ba2c9d57aa
- SHA512 c1a5af2dd637c60f5b1b4d8f2a6497a328efbb34ef2cf6d9c75ae2e6efe819c9f05e559b8c8ad57c01f8ac1066e09f31e18025880cbf1466b82230d4e41e38ca
- TLSH T158F0E1E7C535E855D579C4FF782362316280A1D042CE6A9C1994C85F8CB40FF4959667
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7JQ84C.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7JQ84C.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-7JQ84C.lnk
- Size 1KB
- SHA256 f1c3879913263b2028dd10d6f151ffc305b8f535331aa66aa6c72c640f5b4531
- MD5 0b17644f97b434fe5155fa9208a2b5db
- SHA1 4737faf01fe3a7ff053d90dd91370aacee837457
- SHA512 f174251bdf85697c380a90490740f6c1ac3f7a4436663148b5678b01be3e89f5359122cf117fe101c06ced4c0f519ddc22f68d38552050109b86d038fec7b165
- TLSH T1B93147503EED0664F3B79F7698BB572485BEB8558D20C62E4141454C5022A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.