General
- Target DOC-J13YGB.zip
- Size 862B
- Sample260804-kks59a1wbs
- SHA256 2da6e0ee1963b1c153b670736e95d466764c2e63a9dfff740378a08db206acb5
- MD5 9ec90d7b376e4263677209927494a81d
- SHA1 12f895a3ee4ca9588b45d1e88620be8a6e6a5017
- SHA512 759d7fab16f0643f3b5a36e2986c0d70ba2c3b6c813f996fc0bee472e440ab1c81f6e1018a7e1b3ed3d5fcb4c53c926254ffd631a00609bf085e806a22dfe187
- TLSH T10411DAD72AEB369AE86F60BC196BEF964005146044D1D2D536F3C33643998581785E86
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-J13YGB.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-J13YGB.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-J13YGB.lnk
- Size 2KB
- SHA256 22fd19aa35653336cde9366357f70b56cf7b5871b2286ce2194d73efabb6a683
- MD5 863e523299cde7700713d31187bf05e2
- SHA1 4b7e3401f9dc50f187ce0aabe2373738340b3864
- SHA512 cc3665fd713ba9b990e0735f9063075fd8932b410a193827f371739708fe1f78023cc8969635e6dc8fc0631538d46b162b380679c267a64ead1067cd4d86e549
- TLSH T17E417C843AE901E9F3BB9F769CFE3B1448BBBC066D30C69D0841850D1422F51E8B6B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.