General
- Target DOC-2F5L08.zip
- Size 919B
- Sample260804-khk2vswamb
- SHA256 f9c3a4c7b73f82fdfbc6d9559270dde8c784ee6d638766200a76dfb8d694e2d3
- MD5 70e962395bab2bbc33cadfb4fdb5c494
- SHA1 8d0980cca6e93dc6d27f15042e685762544d9b91
- SHA512 ce7b221f0534a45f3b9815fdecf706d759b3033485f0d5c9ebd930d6142bf34b7f46ca322b35ad4e6d2484ef2d49bded5ec72e4119370d6e23dc923ef921fec8
- TLSH T11311EBC316C9510DD23FF1B47B0031BC0DC4B5086DB4D59B0A19BD01D4F34143E74A52
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2F5L08.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2F5L08.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-2F5L08.lnk
- Size 2KB
- SHA256 78275769ece5e56ea76a9385aa2094ecc88c541472cb503c1697439b1f6df19e
- MD5 dd2c42503ede904ad75a305bcaff82bc
- SHA1 0aa7c7a0c54c1fa85016884acda30c3b581d689c
- SHA512 0d79c94fd1939e42eafa915460055c38c0b8434cb5d08a61d9bc8e95ce62398ee16fd123cfb9e5c93df24d520a1ad0b8223b3ddd07fd20b12928f3805eaa81e8
- TLSH T1A5410B852AD941E4F2BA8F36DDFE271189BFFD515DA1C59E0C50810D0521B04EC37B72
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.