General
- Target DOC-LHVLAU.zip
- Size 587B
- Sample260804-ke41ka1shy
- SHA256 0544ee5220f61974cf4f486a51449eefc94a12c16160c56e2839dc9b1906f276
- MD5 5f8af2b59d579d3a28fd983f131202cb
- SHA1 4f0f94eee039def360a13489e254612a58a2c235
- SHA512 13838ac5357fb42b93b7ab2d639ce46dd296e9ff1be38f57745dcba58b862d510b952e4f3e8307735359911530f3cac6a7c9275e24aa5dee8ec6ea8da85a0991
- TLSH T1A7F047614291D911C634C571C630853B0D1898111316FFD8371CC9140609B5D1F093FC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LHVLAU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-LHVLAU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-LHVLAU.lnk
- Size 1KB
- SHA256 7e36496b45d4664058885ab91f32349ebe10667a836c0e651f75c21519c57a24
- MD5 941b096564bd0727e1f4eb052ce4e9b7
- SHA1 ff852c47f64088aaf6541dbd906d71f5ba173b21
- SHA512 21a24b8e332f7173cf3d236fbb43580f2da9c25e64b7beabf35374ec6e5c2fa534955e2e8693521af6824fec1d7214eb3f7c744969ad78e26ad78c6e105a55e0
- TLSH T15831CB103FEC0A24F3F78FB794BB5B2489BFBA658D20C62E0140460C5032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.