General
- Target DOC-WLA21A.zip
- Size 589B
- Sample260804-kh1sba1vfx
- SHA256 d77912798f9d1919496f1760072aeb5859212e9b73f6ad95886281ba87db621e
- MD5 e264f287d76e424b9b19a7d62141a68a
- SHA1 4f7721556d64498ffff5f2ac9f6f51d83af79cb7
- SHA512 68a585deef2ed871d38af4eb9836cf9c62448a627aa6838d543b46177bbef887a5c4e9685efd6bc933369d61c65c4ac1a9e77537c8fa7f477f7c2947a83cff44
- TLSH T11BF0E1A587E15300D70F81FCB9ADC5D88A44D4D0CE6ADF161F93DB19680071ACB565A4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WLA21A.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WLA21A.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-WLA21A.lnk
- Size 1KB
- SHA256 f130aa3092f63f405f621efcbd778296a295e5fc09e5dbc6e7cee4255d499459
- MD5 388491c7faff1513adcd2bb5c26da32f
- SHA1 3bb8da8704595cfe025f24d0bee630ceded9167a
- SHA512 a0f9671e26611a94a247e7754e6c14557875b9a72c823897bf36456b5c61f36867db28f6f24a3c5c5b07a2e30ea0f9ae457ce2a0493c4db6b5d2513e525a140c
- TLSH T1353197003EEC0624F3B38F7698BB572085BAB8968E20C62E0040490C5032A15E17AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.