General
- Target DOC-2V6LEB.zip
- Size 923B
- Sample260804-keka6avgqd
- SHA256 0513eb26fbf8e81d05267445477010d1eff2d4c0576251fd136c5368c03b075d
- MD5 ec59e7eac25221269119148e41903ad7
- SHA1 50ed738339165850714d8c2ac497c49b06f7547d
- SHA512 83998f40ea8b483efa2ac6fbf203e8472875db12823627ee1b00d19b5528ded0053cf3928f3348818d1ce2b5769102f7ccd5c346af997937ede21649cc28fa5c
- TLSH T1CA11B7ABAE01504DD066D07ABC572742519C2861EA43FABB550C704F57F85B91D26230
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2V6LEB.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2V6LEB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-2V6LEB.lnk
- Size 2KB
- SHA256 9b951ea5d2c84a2f75e540fbdcee6d01758b4b00d56620a1513505437ad24e35
- MD5 9cd388d6f76a57a5e3eb43627e8763fc
- SHA1 b637066d6f9dfc7eaa31933d7b10b99cf42eb9cc
- SHA512 c3debddc7d654df6c58446aa2c84e527f890b9185c19bc46701f3533cf16492bba4116bbe71192985cfd357f5bd64579c2980ae611715c2790671d8b92abb2e6
- TLSH T1354146803BED01A8F3BF8E76D8FE6B50497F79516D60C51E0800810C1922B01D9B7F26
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.