General
- Target DOC-T93ZJL.zip
- Size 978B
- Sample260804-khwtcs1ves
- SHA256 6d83623d3e555f2ceaa27b4de6ed6998d3fe3e076da94b9b28deeea901e4274c
- MD5 bb4241b467a8844dc0c2c03ed10b87a4
- SHA1 8cae22ab3be1741ac48472860bbb2f30edbb4c14
- SHA512 aea723718bc07605412991b8441fd091a50934f8188de4a42f784325b3012a710a81eda3713534336dbc4551018cd8842ce0649da0cd3ca97011bfb4bc0aea17
- TLSH T17311C4A0F2709200EEA3FF392410282745797851A6C164C4C83EAC5A94032908188A75
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-T93ZJL.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-T93ZJL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-T93ZJL.lnk
- Size 2KB
- SHA256 10f15135e71f7c35f3bfe316e8a78a8850150c3611bd6debae3d50ea22d715c1
- MD5 8980c1e01b468b5b538e6f83500a730c
- SHA1 bf9e91a8495619186b1dfe34f6772dd89121023f
- SHA512 46094611bb4987b529b3fb403cfa247ac18fd642e01e1b5cf5c87b52b2865b4a08b039ce7035ff3dd776d9f2a485222acc6553268cad49ea573be191f6cc78dd
- TLSH T1025146802FEA4198F2BB9E76DDBE77948977B9212D60C64D4850820E1823B06D977B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.