General
- Target DOC-PLD8C7.zip
- Size 923B
- Sample260804-khl9xsbl4s
- SHA256 13881f2347ee222112fc5795077d994d46ab456efc7282366ebc5a281c477116
- MD5 714b2a942fb0312ef157ed7612a38c0a
- SHA1 ac0bbd8915732ef4828c286abaf80495e2b29406
- SHA512 18637806409367c1c7e0101177a69feb9beef24120597619d1470dfbb51f1bdb45d103cec575df35539517d16a22aeae6c3ad083e455d3a3c616e62681029568
- TLSH T11111B7A392515C4ADBBC90B21D400FFA61E01D90D3BB7A62522882F57E2F43772E4610
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PLD8C7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PLD8C7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-PLD8C7.lnk
- Size 2KB
- SHA256 042fe9cc3a14848beda15ed3ddc3e06ce5ba06eb152a9e75d769c87560089014
- MD5 e54e7179ecc43cbcd562c783d115890c
- SHA1 14f89f4af01792594afe96d5430b8fa9f95a3e8d
- SHA512 e4af2d1ba1152c55cd085af3938dca7639707895e2f640faeb61756e53597349cc6d2394d2e1a8ed33113fd5618c94635f1e29b1d17c678b4acf7ba512281252
- TLSH T1544171903EFA41D8F2BB9D36EC7E331648B7BA915D60C54D0850810D4922F01D977F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.