General
- Target DOC-LC6GWA.zip
- Size 589B
- Sample260804-j9f2jsvela
- SHA256 ce4c4baf742aa7b2b7d11ccdbaf04ff082d53aea23a773da6fd9d60de725edf7
- MD5 a21fd185ba0e9a8e256ea2228facf550
- SHA1 0c55f12358369ce4e62f3d8ea6475e2ccd96e6a4
- SHA512 01c17d8dd07893fab6fb58acb6acff85a95e3c74f5b2596fe564a7541f3031d82ea03bd19d2519f7888ee74d73dbda05f84d5ab820f4f3102ab6578775dfc03e
- TLSH T187F0E146AF94F223F11492B6B7F12F845E1342C7CF293B6A05F5E90C1519E54A450450
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LC6GWA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-LC6GWA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-LC6GWA.lnk
- Size 1KB
- SHA256 02faaeb0cb7e283b668b6c0e05dc2d357075c4304e23e103bbfcc0779a927b70
- MD5 a943eed7b5532ea2fd2415ff396fed99
- SHA1 0264eabe190e7aa259590a83d72ef6800a323459
- SHA512 470cfeda1db3885706ac756137555a607176e9c7a543ab1cd9dd2bdf09d6b113408d6ecb09b619166d53d126d1ce529570d62a14524ffd3c63a97a3afedaaf77
- TLSH T1803197003EEC0624F3F38F7298BB572089BAB8968D20CA2D4180494C1032A15E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.