General
- Target DOC-LFN1LO.zip
- Size 586B
- Sample260803-qsxfja1vcs
- SHA256 be622ce5535a584a7fdec6377a3dcd69758122c969c59d39ba7fed87e0d68f70
- MD5 957d1f1e62cd7802677c87b41b04fe95
- SHA1 b5f2d2e370c4fed499ba9e1c311497c8f5f58e6f
- SHA512 f617087e411ef975313adc657f678704e55f73580c6d7d25573cf3a4799263043e4a2da7650f0f904b66acf0eba439b7e2e7c10a5eb4dd5160d5d388e4d8903a
- TLSH T11AF096A38DA42423CE56B0B39CA2C337E1CC8AC5442DB30265B2E19F0CC0FE22B0207C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LFN1LO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-LFN1LO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-LFN1LO.lnk
- Size 1KB
- SHA256 c81e5a690326bbf79b4217b6809918e4bdb17fb5eb3e1caf456473d947a0ae88
- MD5 46abbd920d93479f91db6adeada3b18e
- SHA1 9d85889616640e9c9cdff46d9877f3256d56d543
- SHA512 14fb54c13746132813a0171b85969145ee362cae39257485f32a25722b485ca18794a883646fa42e7dbb44b431c31e00e78b5e733b6bc4ee03baffa0d3d85fe1
- TLSH T1EC31CB103FF90618F3F3AE7388BB5B2084BBB9669E20C61D0140464C1072A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.