General
- Target DOC-6VKHL1.zip
- Size 805B
- Sample260804-keclbavgpe
- SHA256 55fed165d9dd3337778ea0cf2e11c27c3312245362f389caeac7168aa836d534
- MD5 16fa2f031f2b6661bdb4cac8559b2296
- SHA1 99b734d33e2ee52f302d0512b8b7efe2129c9145
- SHA512 29c46d2d34fa18f07bffcb875f0961dbba240d093c06df3b59cbdd687582c931541d6d598c908a98b9194752029aef2c3debe95eb9fdbdc233dd94d167c4b032
- TLSH T1CE01B5B3B513F830E54F5BB9CC61830CB0351220A8A02F192C3AF1034A637A01B6B350
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6VKHL1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-6VKHL1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-6VKHL1.lnk
- Size 2KB
- SHA256 859d90786a6138efc7a7f3413bf6bd40325cdc516e1cfa732739de830d80d4fd
- MD5 8800bc4e6f00a7dae153b4c29f344e41
- SHA1 71d6b4b829bcad42d8b4fdd0c30cb9983ebabf4d
- SHA512 ad00b53c3d018f927045a3b5832955afda9d9b5bc6d41d0c6cd93e4dd32a49da7977f4476513400e51f460203ea767a60ce29569f0b197f169ba291ca8c67b10
- TLSH T1AF41BB403AE901D8F2BBDE76ECBB6750487BB9A24D60C58D0440810C0422B06E473B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.