General
- Target DOC-VSEKMV.zip
- Size 578B
- Sample260803-p8dspabm6w
- SHA256 3db93b74a0bf156010317b1fafd615784d5950e7c7e33a6edee7a64ed58463d4
- MD5 82fa74cb3fd9abe36d6fd6f2dfd787d8
- SHA1 80f1b7d1dc33c71c35f93a3a14a03d86b727d41e
- SHA512 32d89b5056fe0a2d79469e465c2d1a1f52af07e821c8d6fb0b75581a83cb2d8cd9f71e28f9ac028a85185c8b6a8c49894973d7a7d3dbba387df9e5c9768eee39
- TLSH T1E4F09616D91F8481C77292B1B4243531D130ACC40C1E1717C4BCF0C648C0AD07983020
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VSEKMV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VSEKMV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-VSEKMV.lnk
- Size 1KB
- SHA256 87f95bae50b026cd641d0d5296c6a535ac9a2484f30353ef848bf19364463c36
- MD5 cd3c44a30d93b38fd84c2a5161d05737
- SHA1 339ce3c81d780dff13acf7e17776e869e751b083
- SHA512 ffe13bd28364defd610886710cc3c5eca2a6393b4192a5d29b6d38ad1e3f8871f0b6e42c9852e57168192c9c1580b7992823f9234ada6b4e0393866df1597d3f
- TLSH T158317B503FFA0654F3F78E7784BB571085BBB8599E24C61D0141464C1073A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.