General
- Target DOC-JBWIPG.zip
- Size 596B
- Sample260804-kk7zea1wcy
- SHA256 dff6a4576eb411acaaa9f2283b9b4b90bfde009c57e0cdb8d21ef8f6bf81b79f
- MD5 1f3bbece52e73600d2ca6eac32999d89
- SHA1 c480e7d245f7702a0f044f01d6680b8afa7bdc52
- SHA512 d1630a6e9dd452a5573b35d416a93b6b17d601a32c0bae6ccb1ed9375b9051a937b46ff864d9c0f4da0abac2d04ab169ee99ba95199d2e4057d81d9edb7b5b2b
- TLSH T1EBF096170021AC03C09BF7B02D790B6974730BFB115FC477F021DD48F1442A62AC4828
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JBWIPG.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JBWIPG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-JBWIPG.lnk
- Size 1KB
- SHA256 9611bf8da65147e474d0d579227c014e6ee3818fe801bcb97d83f2a22f714900
- MD5 b997533f22de90b079992c4bf795795e
- SHA1 06dcab2491db6bef12964d07e97bac74d06f2223
- SHA512 0edda835a0155d279d85ce48ca4f8fd8bc700c248ba3670ee557cc7fe379b85914632b417f902b008ca00e61b0a440955c7646e809ece643d8a4c892e5944041
- TLSH T11C31CB103FEC0664F3F79F7798FB572489BBB9558D21C62E0140460D1432A25E53AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.