General
- Target DOC-APVYGI.zip
- Size 551B
- Sample260803-p413esycnc
- SHA256 353b868e6408e9184b218c8f45a2909d8691abb85cd4ec3a51980bed21a69cb1
- MD5 0f8fe708bfa0e8ec9ee388f442593b93
- SHA1 5049ccbed9590f7cd1c7365282d91a8fd8e4fb9b
- SHA512 2305b2a95a4a29f78cdd004e5935b57f630e34e82fe08708a96efbe81e1a5915caa9b955f3be53c8a63cbd8215e383b92497dcdc7b2b1a054698ffe1109b5cf7
- TLSH T186F0C067D06A4813D60190F6DCE337960B6BA40C04061B0B1D2D99D31C2DA167C7F6E1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-APVYGI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-APVYGI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-APVYGI.lnk
- Size 1KB
- SHA256 d05c3c644889fc73df7ffaacc3ed7c19d23a5ebef8b871ea1b7ef9433e59ddbc
- MD5 f85d4d6bb5b7a66350d0eebaf399e8f6
- SHA1 9c4482bd065189381061c7b292b06051d5b19b1b
- SHA512 42590046a9569e077eb3b5da40a5f34fa937f0a33c8d6f7696f5728e43cf9927d3f900dd45390f3591eca7a71d3d93dcaa2c9ecb050db8fe69a796e4f644ce7e
- TLSH T1143121143EFA0624F3B79E735477AB1489BBB85A8E118A1E418546481472A14E07AFB7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.