General
- Target DOC-ELB1PC.zip
- Size 971B
- Sample260804-kkw7xa1wct
- SHA256 936d2b492dd59f814fb0ede2d712e0bb047f93977456b7663b19e0d1a060ca45
- MD5 c207420fbc9b31b5da780a880ee5a18a
- SHA1 b05694da67c42e057c2c0ccbbc0ce75e1bbfd43d
- SHA512 082444ac44dda323d5678257d1aa3edd4cc2f02230d81fc88b8355c71b8c616ae4068a8daaff5345a8abe97e661a1305465ff632dffc5493e0dd1e30e4830dd3
- TLSH T1F51190D68383482AC4A6AE3C50A2EBC0401CBAA0206A4ECB7B5AD0368D307942D46833
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ELB1PC.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ELB1PC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-ELB1PC.lnk
- Size 2KB
- SHA256 014a1bf63d98d20a6421c748f93fedf2f5fe28ef794942dddb5e61ab01b99778
- MD5 ca2f6e6bcfa7fac04ad40736702c15d8
- SHA1 025737aea795c09ce772ade79456777c38211aa2
- SHA512 6edde0aaab5056b84dcd82c742005b4cd46905882c328a3494052dddd5aef1a175b440f27d7a595650eaa8e5ababf7881644fad041d90e9a7029ea191a1bc5c5
- TLSH T14E5126953BDD41D8F2FB5E76DDBE2791497BBA527C30CA8C0841820C4426B41E9B7B62
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.