General
- Target DOC-V4KLZY.zip
- Size 808B
- Sample260804-kgf2hsbl2w
- SHA256 35592278ec48e532013ea5bacc474ff3028916177fa3d81358d1c2475076e382
- MD5 e2220f106d717cdb2505f4c15b87fa89
- SHA1 69395df476d29b53ebc6840f2df34b2911741b11
- SHA512 d0910fca6fba955418cdb6fa95a01bda4378a1ab53a6ecc72d9406a915d3c86e3dd96ea63452df179a43b20f8a396888b2da857a459a4318a073dd57cf8e61a4
- TLSH T101014153C3C50805CE0BD2F5572172EADB2A1A53056C095956A5BA4EAA287D3EDE5880
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-V4KLZY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-V4KLZY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-V4KLZY.lnk
- Size 2KB
- SHA256 2b1464653e92e5184c98269d6d4bf90356f11fb61960988792a4c20741afece2
- MD5 bea614d6360bfa67ebe3b99b70c4e26f
- SHA1 4ec2e42c72dd3e6512366135b29350e692835418
- SHA512 995c71a51affb87f982e796ae93f556caf49dbcf3d4bcfa71f78da8b5a97b5d74388b2bc0acef2a5bb94b6363e030af534f91b7b11213850f0739d9918320cae
- TLSH T1144187803BD902D5F3BB9E72EDFF275185BBB8548C25CA9E0800810C0522B00E277B7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.