General
- Target DOC-IB95LP.zip
- Size 594B
- Sample260804-khhazawalc
- SHA256 eb7720a5f012e632632ce98f006bd25e03f02c92c68fd045294cf0057b679eaa
- MD5 bca4f55f7c4374884027209c4ed880b9
- SHA1 845631d1a4ed28eeb9e8a41d7aa073670a91c930
- SHA512 d945270c3124fba1cf9015a9d1a2ebf28779a23cf7ff28134056dace87c7ec3471307277163179a99e52410284ccc3fccce8ec4a450efc245b488d21885ccf14
- TLSH T1B3F041B30B29A86CE0AC497C5676ABF46DEC85424817AB0F1A24C420A5342A843E22E0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IB95LP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IB95LP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-IB95LP.lnk
- Size 1KB
- SHA256 0820d2c655cebaa15abed199a51c0a532971c61bb8593e7a2a55b22d5bf49ca3
- MD5 c27172e56a56f301c3adb62ffcc438ff
- SHA1 2fb4002332acfbcea788457611254641f6d51bdd
- SHA512 3e819a7e9b3a3cf4057278aa9d88bfdc0175346228b2eccef43de8a70bad3569b8e0a04ad592bae6d91c46d87677e1ee3cad86eaf17294e2cb722767c43c98e0
- TLSH T18431CB003FFD0624F3F38FB398BB5B2899BBB9958D20C62D4040464C1032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.