General
- Target DOC-UX62KW.zip
- Size 917B
- Sample260804-khhxhawale
- SHA256 8405f7cf8411825b8a1b28fa95842c0eeff3371cf333bace0cfb451500f0330e
- MD5 9dafaabf24221d48edef1e33d82b3364
- SHA1 306dcf99fb1025b4203a5e59566063ce2b6a3e2d
- SHA512 84a2bd63cbfa23f41bc107c48afaa8af246a653d75017278efde3be5e6b379a99c7057809884286b1917343109d9b8c04c8afbcced9216672c9117e02dbea4ac
- TLSH T1FE11EB7B12CF0B47F250A8F09822014454308FD1AB21DC0F3C81C0F70CA26D55E0A91D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UX62KW.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-UX62KW.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-UX62KW.lnk
- Size 2KB
- SHA256 7c0869783250602ea4e82c933200e960a09390730f26b0bc8335efabd32a99f0
- MD5 2141bee50a9bfbec5559e6df0e5e76bd
- SHA1 f3bfe005372336f5acaa1a25f4a1996c0cb7d60f
- SHA512 17b872f5fdcd673866c1f1eabe5137fc23f79b3b546ed1b208c4940293b2089c82f4bcde5c7cce6fdcf59664a00ca9512d5a2a58285e72fbe4747cca889b3be3
- TLSH T1D64148903AF900E8F3BA8F32EDFA6790857FB8516CB1C69D0C50814D5522B00E577B6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.