General
- Target DOC-QLEJEE.zip
- Size 590B
- Sample260804-kelh8avgqf
- SHA256 681b794a2decaa55cfa4899d846bb8e4146ab46038c3422e2d2279915b21a0af
- MD5 3b87d679955f03f44d02aa3a1596d626
- SHA1 12881d0605b7521448aa55bc818901a7fc792c4b
- SHA512 899ee6cd194dc2bbba61529a79a83ac30f86f024a88d6c2752275fbf6c2ad0664585195d9541d2a1da361ca0158b13830921cf76b4c020de2c4fd975d03bfb28
- TLSH T17BF0E1A512C55D75C087C035D83248C945E8995D24DFAEA02665F05C0D087F677ACCA1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QLEJEE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QLEJEE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-QLEJEE.lnk
- Size 1KB
- SHA256 e6928dc12ca6bc69e4ab2ebe1e51f968dd5edd7e1265c6c327a152f0a569c82a
- MD5 a3b4cbbbdb61f17e71972616ea642b96
- SHA1 f83d95ef2f535351cead84f0ef5d8a27d66493ec
- SHA512 b853b57fc6ec3b43c806998592b199d9695e94500559c24f95455a875d268f743e03689d652297967e4dc7bb41d768b2a83d4eeeae3fd776f6ef20140184668d
- TLSH T1603197403FEC0664F3B38F7388BB972085BBB8A58D20CA2D0040460C5472A15E13AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.