General
- Target DOC-V283L6.zip
- Size 586B
- Sample260804-kbhm6aar9s
- SHA256 e46670ea56d15f743ac705b5edba4cd6ca3ffbc9346b9d1fdf05c130f20809e5
- MD5 09303070da261a607bf0fad317f8f34a
- SHA1 b3cbf8522f78994365054b9e56e11a1ab3898a55
- SHA512 6caad44972dbf6c4c47613a342b0d7980c66718c21cb4ddb84ac016616271affd345deea195630d4b51732b721ed38474d0938cf4b544454df63a0d1b3d16af1
- TLSH T1A2F0E1535C960900CE0A9AB9211D219C8535FB03A81BBA4390E5825046B06D91C0FEB5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-V283L6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-V283L6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-V283L6.lnk
- Size 1KB
- SHA256 e1550f38c19092986280e614fb38d67ead0f98245e0311c925e2918d03df92f8
- MD5 8ebf31800fd696b3ee968e800857fced
- SHA1 6ebd19189034c860764d76973146c772d2c98283
- SHA512 7d641980f68e6263ac180255a82f3312366a102896d4b71446c3738aa794cf4231e19c97125280e01090408d702b24a291d78059f8561712d67db91fd8c38a1d
- TLSH T1B931CB503FFC0624F3F38F7398BB572489BBB8A58E24CA2E0040460C1032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.