General
- Target DOC-VNKJVX.zip
- Size 580B
- Sample260803-p46mxaycpg
- SHA256 f6122fe9beb9c76685af3fe89d695e677ec8955d851a1520fea38cf3053884bf
- MD5 e848050b6651512965b5546ef6602dd3
- SHA1 74e4ab9d0473e31fc2be1254ab152361a26385eb
- SHA512 ce72fdba0929b9325c0ed9b902bea8526841811e81a7a9d07386e3887ab31c058990a8684b458977cab809bbd28cf5e99a7d266d02c95617fe9ec63921bb8c12
- TLSH T18EF026E223085844E5601CFA853F417299BCD05F201D9F1F8FA4F64C56B0587F5494BB
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VNKJVX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VNKJVX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-VNKJVX.lnk
- Size 1KB
- SHA256 7cb376fb9fd344550acb6f969cd8b757e44f26df90430d95652106a669f5e55a
- MD5 121a8f7ba089e5028a20d39f747de2f6
- SHA1 c05f874aae43674822140342a29f7668addaf56d
- SHA512 4a6e097460fa7e2a4fa3fe97c78d2080ec98cf2ad7cc300178e134fdd3659c35d973d3ff8a5a788cc6ba4eb5881709c387d0e48f71165daa301b2ba14f900f0d
- TLSH T188319E503FFE0654F3F39E7384BB5B2485BBB8958E24C62D0151468C1172A14E1BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.