General
- Target DOC-2P2LLA.zip
- Size 582B
- Sample260803-qwl4zazfpg
- SHA256 e2672c2735c087be8643a71e25ae18e41b306874deec099dba0b2d8932596590
- MD5 40c016c9b3fd619e57419e1bbddd126c
- SHA1 5e3223f67d680c99d064e244dc1788a850616434
- SHA512 0abdc7a34bc12ffd6d8d2315c2923d61dca3d6dbdb725a5da7cdb78964c843fd73ea4416692a06cdc051ea2fc7b00402214525d565850553aaf32ba5ddd21ecd
- TLSH T168F0265FB715A940CE5448BD35C03335470E62C6348313D7872CB5032D656F19F092F0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2P2LLA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2P2LLA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-2P2LLA.lnk
- Size 1KB
- SHA256 924331ea3c383238d569964fee8582b1b71caeb2396b4d5f58711078ace91f44
- MD5 f5b908bfa85723c474a3f5e7279a7221
- SHA1 13bc4f99561ebdcd556ec1eeccb1a96eb92ef475
- SHA512 40ded69720d3f69bfa9e8c5a2275cc98a8193a283d8d16ec1aaddcd05e98b4fcdf8150eb6ff9d7ecf1f4798ada48707126e7241b4e526c764550f42a2fdd6f73
- TLSH T1FE3197402FFD0624F3F79E3384BB571088BBBC568E21C61E41404A0C1072A14E57AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.