General
- Target DOC-34KBBB.zip
- Size 1016B
- Sample260804-kkt3jswbjf
- SHA256 f245176c66f555050c5ce27849bfd2ace4e82aa70b97b3686a8140afaad464bd
- MD5 0fe3b91634940f5c222f82c21d12a185
- SHA1 e756079617a8c6e5ab7e17573888fa030ceb1492
- SHA512 eb6046ad12821395808f7bd6c7a3ecedc42b8a359de82f91b69c86f7a4c8e1b74f359c15bb8a1d2087b6962a42536650b5244877f9d4b3d5529cf5479f44df17
- TLSH T11C116514E2658A48C249C73385565315C72C7DA9BA9BA8020CBD921F8A6E0A2B945EF0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-34KBBB.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-34KBBB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-34KBBB.lnk
- Size 2KB
- SHA256 45b6ee2b56fbbabfe9637d6c635217f16b482d09f87da171d717d6d5f97b63bf
- MD5 bde44e3b3f2f01f31004bd51ecd698f3
- SHA1 314ee861c09a555e66311954c98ba6a276e75818
- SHA512 aabc74027d490c550256f2d0c8188e2dd0fb260383b26dfeffebfd5705750443bf866420a6f02fba7ae8cc2d15988b36717e7541fe00bc7f2bc2381c1677da7f
- TLSH T1055135803BE94099F2BB4E36DDFE3751887BBA616DB0C65E4C01810D0822B41DC33B22
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.