General
- Target DOC-LHDEHX.zip
- Size 894B
- Sample260804-j9gm3svemd
- SHA256 0ee7175541c7ef25e5f143cbf10c6e916eb3ef21c6e08856d92a248f5857b273
- MD5 fd27fcda6e051153a88d5df5295f026b
- SHA1 f26e855a6e8c0f3ec5eebb5bdb2f1b540a615eb6
- SHA512 f4929c5cda4834e2776ca8c91df95755a9823bf2f3a1e40293e1c20136ab226df2d5876223699517a4fa55906071ce4072e0b49407a9941c571c610b8b7a0012
- TLSH T12B11563D9F930B61C8665431D599A8DAC594505CF508EB0F346FB75622222E49725DF0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LHDEHX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-LHDEHX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-LHDEHX.lnk
- Size 2KB
- SHA256 1f8bbe7c2319541326863117fbb31b726a7e34a0f4f833af57c275f53437b6ca
- MD5 405f7edf1c3d83f316c5e0759449bd16
- SHA1 931b3e4125806e7b2f81e8a0582a53b224a41d72
- SHA512 92b5fa6e332d3eb171a535d8f28ef6ed4ee8233022d844dcaf83b4b4ee63247e67e17f6343a18254642ba680d375cec9831a3bcd3912aca0756966c1c48c5552
- TLSH T1AF4149842AED41D8F3BFCE76D9FF3715457BB9918D60C29D0851810E0422B06E973B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.