General
- Target DOC-KLO90K.zip
- Size 918B
- Sample260804-j8szqavdpd
- SHA256 73f64be5805eee2c9d2413695dfc5fbae26c928338dcdf35852fed017745b7ac
- MD5 66b9d19b9d7f02c5a1fedd4567bd979f
- SHA1 cab3b98e5187267f35719cd8dc2046c05d2d3ddd
- SHA512 369f184e7afcb242edad0432439535258d4289d5056aeb975a0db60a50443e64ec56785bb1050d6aa432e8447d9b92c56ff7bb068fb7488aea90016a610c61f4
- TLSH T19811E61AE7E35CDCF0A748BCAF9E3A72621054BF4E4298035E72C9100CBE8712A4023F
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KLO90K.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-KLO90K.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-KLO90K.lnk
- Size 2KB
- SHA256 04449d1da475fcdad9dfd3be3282740e636c66c2092844b1e0872dc51a929a66
- MD5 0929d9d3191e6af607306b5ee9847a15
- SHA1 e9bc9810ded96e8565e098014193adbcc0b02e72
- SHA512 86ea7ee90369d7a73d97f1b8c33be73b8dd3845663e7d5d4e3f0d9573343fbd3aa9ac44b2e5c8db702f6ea27893c56026c2428f7b772f84acf23ad8ed81ef046
- TLSH T19B4106A02AEA41DDF3BB8E76EDFE37508CBBF9125DA0C58D0800810D1822B45D977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.