General
- Target DOC-L2HJV2.zip
- Size 975B
- Sample260804-j8tk9aaq7y
- SHA256 a8fd04e825c9de29a26e60a94763fb2855c064b184297d6d9dbe846e79347335
- MD5 d435e4a9c8dcc4fa147571fd73047a2a
- SHA1 a163c08cab711f5f9517e8c133b14d4efd052d70
- SHA512 283385eeaf5ffbe17f24580de85f39a94005093d353c0b66ee8c1575675c6648db80b0b93afc096eb05e7b682c797fe85df7ed186d9525dd0eed1e0b4bec05d2
- TLSH T1DB11658A175015A3F40198B7B4D2AC25144CB036DA08E1FE5CBEE45EE6114D446BC01A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-L2HJV2.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-L2HJV2.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-L2HJV2.lnk
- Size 2KB
- SHA256 6d8a21a648e94a1cbbac2f49aa59aa8f71acdf85dbe0d57334236319e403f85d
- MD5 c42da1a9a6044c6568ca59649294d7f2
- SHA1 a60025845585a31b03f9e64ddbe065327c6a9676
- SHA512 3611067b5019c1a553a7bed3cee0785af1c59e2a2e3ec6a4181d27c4361076694a25e4f463b3964687d27401aa5765421e1a40a17136eb734a8f0213ac763126
- TLSH T1765169803AEE01D8F2BB9E72FDBA679049BFFE516D30C59D4841814D0922B04D8B6B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.