General
- Target DOC-ULHAKW.zip
- Size 928B
- Sample260804-j9jgnsar4v
- SHA256 21d409f8db35157d94ebfab0b2bb5704c8dd62d86fd9431a7a0c17cfc7a0755a
- MD5 79f7469ae741e32a8aaf37f951102bee
- SHA1 77a7d225ab5634ae1ee417d1b90fe831e7d93b40
- SHA512 ae9838f2475001cfe21252d537ddaf72b6e0a868722079aef4bbdaac4f38eeddccef353b08f4736427944a66924284b1ebeb6d6eb0e47175f141e18ccb95ef57
- TLSH T1E9116719C2311FD0DDDBCA3CD01E7636012A7C91D54A413879A77B191DCFD951654B2A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ULHAKW.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ULHAKW.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ULHAKW.lnk
- Size 2KB
- SHA256 ebd117f121c66f6052c27690c68e9c4d51fe4063e2cc35c8246cbd2dbaa6273d
- MD5 addddc76fbce3bc80aef48dc72ca23b6
- SHA1 9a823b1af0303b425f4dac12f06e321fb25d39c4
- SHA512 cfcf3825da3888c044ebab1b6aec3cae7ec95556b115061ef07f346a09793daf065ba27e8c1d1ec07bc4e990a1f35f822b6d11a7cd51f2a1a86a99a189eb10d0
- TLSH T14B4145902AE945D8F2FB8F72D9FA2B84547BB8616D70C09D0841C20D0422B04E8B7B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.