General
- Target DOC-EHLL01.lnk
- Size 1KB
- Sample260803-vbcf9acd38
- SHA256 c1ee419f942142f4e3ee5cbe7724f9c86ad84143d780db653b743d904fd5fe4f
- MD5 a2e9d6eea55de9ce4b453fe992b767dd
- SHA1 95a50c289adf768cec37b7132076e6b45058e1ed
- SHA512 4149bdb7b87903b8cdf393d3b29af18ec0cd38ef69a0f4dda675f3c1f7004091b4ea95f705c72f932bbcb2982c022cc85647d7103f3d4ecd7bf3023bb4ae6374
- TLSH T18D3197002FFC0624F3F38F7794BF672089BAB9568D20CA2E4081464C5062A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EHLL01.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-EHLL01.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-EHLL01.lnk
- Size 1KB
- SHA256 c1ee419f942142f4e3ee5cbe7724f9c86ad84143d780db653b743d904fd5fe4f
- MD5 a2e9d6eea55de9ce4b453fe992b767dd
- SHA1 95a50c289adf768cec37b7132076e6b45058e1ed
- SHA512 4149bdb7b87903b8cdf393d3b29af18ec0cd38ef69a0f4dda675f3c1f7004091b4ea95f705c72f932bbcb2982c022cc85647d7103f3d4ecd7bf3023bb4ae6374
- TLSH T18D3197002FFC0624F3F38F7794BF672089BAB9568D20CA2E4081464C5062A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.