General
- Target DOC-LAZZK7.lnk
- Size 2KB
- Sample260803-vg2nbsfp3z
- SHA256 0a28efe782e3a06a6ef7be1e1f9290dfb2f043004c52159db8e33d87975fa5d3
- MD5 991e81fd8769ea5a9ceef27206f0d75c
- SHA1 077bd53084b9cd42c9f830af3cbe481de5f4fe7b
- SHA512 790fac9e220aed7e7cafaed4e6822c0c9fd32c1331d54c335037f6aa618f66a8be28a1e3d81504d256c7475ee19b405f405a9a44eb42b1725d1e671e056769e6
- TLSH T1344198412AED45D8F2BB8E77DEFF6390827BB851AD60C68E0800420D1422F51E137B23
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LAZZK7.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-LAZZK7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-LAZZK7.lnk
- Size 2KB
- SHA256 0a28efe782e3a06a6ef7be1e1f9290dfb2f043004c52159db8e33d87975fa5d3
- MD5 991e81fd8769ea5a9ceef27206f0d75c
- SHA1 077bd53084b9cd42c9f830af3cbe481de5f4fe7b
- SHA512 790fac9e220aed7e7cafaed4e6822c0c9fd32c1331d54c335037f6aa618f66a8be28a1e3d81504d256c7475ee19b405f405a9a44eb42b1725d1e671e056769e6
- TLSH T1344198412AED45D8F2BB8E77DEFF6390827BB851AD60C68E0800420D1422F51E137B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.