General
- Target DOC-YY35LS.zip
- Size 587B
- Sample260804-khnsrabl4x
- SHA256 0173d0f062f2c9f966077e646c5ac00007d6d58bb559ff6441609f080c4a736d
- MD5 efe9b105c93c96559f11aa260e400524
- SHA1 1124aa1c99176e8c0570af4f6bdfc2457ac21f24
- SHA512 8fa0da52b928cb3cb52041858b2754ec944b17be36e3f01124cdc0a8e174c2ed3dfd8ebd468870bc26e9a8192a9a72fa6dbfab04b45017ced0158e6babbaaf7e
- TLSH T129F041FF58980000C919787E046977D41B38B85202AB48834D90CA083602296E94A4A1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YY35LS.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YY35LS.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-YY35LS.lnk
- Size 1KB
- SHA256 a489cb896983333d59a886a14fd932df70c0118e1a148250ddda6420dc55ca32
- MD5 b53ff6145b517862507e49bb20e386b2
- SHA1 e3ab9ebf724d7f610ff1b62d8c346c5590569970
- SHA512 db3accccfb139617ad628d553636186bebd8e5a9d05914abc607cbb8c6cf4d9fc9884fc4a8269787c3dbfe84311207858682ce2ed965a51b2d524d1ff558d734
- TLSH T17C3197402FFC0624F3B38F7B84BB572085BBB8958D20CA2E0084450C1022A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.