General
- Target DOC-LJVPBI.zip
- Size 880B
- Sample260804-j9fqsavekc
- SHA256 58c8028bbe9959cb05cc977e194963a91827a25e3dede2ae8ac1005e8f1c5753
- MD5 61a8a3a498f4908384394de51d16618d
- SHA1 d28dda8f9d7b4bc130000067147e979e30aaa922
- SHA512 afd1798ff11992238a26ce4ec200f569d3cbc74ff5c118c2189926ed03b0681955d3dd46c27571532e5fcbf6a3cd1a0b75d93c750476629c076866b74e9070f8
- TLSH T18B119682CAD1A3FEC9B9CC3516B00FE185017415050544F44C675D18DFB5183FA2DA60
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LJVPBI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-LJVPBI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-LJVPBI.lnk
- Size 2KB
- SHA256 374cd48c73c2cc919a01adbc06d13622f48fa27bdc5976cbd2dae70202ca12d1
- MD5 8fa5b938e50c00cac1a151d0f7962649
- SHA1 648cd35bcb55735daa5f72f84fbd50041a8afe02
- SHA512 534c88bc46b94384447f85d0e37465b44d965c916644d92a3f31abef7b686c1d3bbb0c7acaef5876b1e18079b63a0e73013d4f6b969ec9651206e73920ec2d81
- TLSH T10F417B802AED01E8F3BF4E72EDFE279085BBBD526EB0C54D4810824C1822B45D977B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.