General
- Target DOC-GZ9QYF.lnk
- Size 1KB
- Sample260804-kkrbna1wax
- SHA256 7e23a3d7f834866e10bc1b981bdbcdc22e12922f1fb53edf371186a98d5d4ced
- MD5 10a819d000343572cd9ffc5218964c5e
- SHA1 52ee06ba68af101d777683c272ef4933b528e069
- SHA512 bb2b7336f9e6bcc94603bdb369d276cbc030234730e20d60a22efeff0fbdc0b720c206942fb647715f9adb541403f536c1e6b73f5f6270ff7913b04ef0bf5c23
- TLSH T10E3197002FFC0664F3F39F7384BB5B2089BBB9958E20CA2E0142460C5032A15E13BF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GZ9QYF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GZ9QYF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-GZ9QYF.lnk
- Size 1KB
- SHA256 7e23a3d7f834866e10bc1b981bdbcdc22e12922f1fb53edf371186a98d5d4ced
- MD5 10a819d000343572cd9ffc5218964c5e
- SHA1 52ee06ba68af101d777683c272ef4933b528e069
- SHA512 bb2b7336f9e6bcc94603bdb369d276cbc030234730e20d60a22efeff0fbdc0b720c206942fb647715f9adb541403f536c1e6b73f5f6270ff7913b04ef0bf5c23
- TLSH T10E3197002FFC0664F3F39F7384BB5B2089BBB9958E20CA2E0142460C5032A15E13BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.