General
- Target DOC-KHHL33.zip
- Size 596B
- Sample260803-qmnw7szbpc
- SHA256 414b3ab02ebfd084a772389f8a3a1979e6c64be9b3e3bd78d2e005aef913cf8f
- MD5 df0dfe18d938b6f26bbec67eb1726d78
- SHA1 5eddc1196f175fc5b183548c6fd679a18cfd45c5
- SHA512 31f693ab8e8b38739f89f47db03154ba31511d3b5482226aa6b2ad829fe0b4606683e4da3af2c747eec6de835766722148c22c5b335e6d74aaedabc285f4233d
- TLSH T14FF047CA1345E452D9BB95386F73534110501404570DE287062AEB4F79ABF53C355A69
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KHHL33.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-KHHL33.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-KHHL33.lnk
- Size 1KB
- SHA256 d3beb80d8d4c885d8418c69b4133fa4edc83ad47cc7fadba75dc09a0177510a9
- MD5 a9ddd0e9fedbba645a953531170ccdab
- SHA1 c5ec513b5793d5f402cc2b13f8d676d9bb417851
- SHA512 d25071a43fe292e3b7ec4a39fee8cd4a1de1e34a4f5519efc58b5f04be0f558542e74d44de8970abf53269f0394c5ee6c9c98512c580f2b864e96ff682ca84c8
- TLSH T18031CB503FF90624F3F38EB395BB6B2085BBB9669E21C61D0141464C1032B04E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.