General
- Target DOC-L95KEH.zip
- Size 597B
- Sample260804-kk8wps1wds
- SHA256 1a9ae2a7756589799fdb6323ca04924834eea30c11eaffa4222fdde4f86ee566
- MD5 b74629bec95d5d9a96ffe848d92ee0c1
- SHA1 6f02f50a959432baa2f0b8ba427e94a679443811
- SHA512 dee9483df0165155322749191f70bfddab359c213d1cbd4f53b0304b7679aaa3fe4efa5e2828d39cd635ed6cba04390545610e545ee61baf9b884cc36b63878d
- TLSH T1E6F041421D060D73EAB2F0716E2BA26D0788F04A45727E5315F4FC88A058C916A051B0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-L95KEH.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-L95KEH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-L95KEH.lnk
- Size 1KB
- SHA256 da2802be467b836cdf79320e4054fc1cd8639520368d91ef032e0c7fce90d169
- MD5 7f868de9af458ce451af529783c75e85
- SHA1 9aa6a21d11cd03778170dc7a5d07ccd64e1aad2d
- SHA512 95d588ba7994a4218b5ae889b9ae5a7642ba2bc530bfe4efc1a9218c81b0888c89e9e52466dc0257522d61edc3f7f86477cf6da6717cc51aedd81f94f3598177
- TLSH T1C33147503FFD0624F3F78E7794BB672489BBB9698D20C72E01414A4C5032A15E53AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.