General
- Target DOC-VLYKEM.zip
- Size 583B
- Sample260803-qsbh3a1thx
- SHA256 60842dfd06fa3384dadfcc9fd334bdfc76c9045d525680fefd80a95d0dedacec
- MD5 0d30f6a5f315cd9dcaf2fec2538d8a23
- SHA1 e3625314fc6264e5d9864c81ba29d7c23dfc4127
- SHA512 a19d78205445bb2af2ab1220cf7b8efa76d76d2f34b85649bb4c34831c6f082d751f73e6fbf21a4f9c0170fc2334cafdcab4072013891a51417eb22f5b7a0a35
- TLSH T197F096F4243CA0C3C6131E31AD027BC7F02B80C2BA157B04A3FB4E8E4441D226AF6283
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VLYKEM.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VLYKEM.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-VLYKEM.lnk
- Size 1KB
- SHA256 59147b76da1c114850c0986fcac13f4264566f86165c9d2fc2c7cb53c97da8ae
- MD5 1713dbce46d5681d43197828f2f0ca67
- SHA1 1049cb4e6af246498643fc4249506919975f2bcf
- SHA512 3d45bae58bf2d1ee428d738efafaa79a9408c90d93154cd9f2327fb86feecb5918f21ad26ef5fa8ba8b95fe45590a17f92c15db277bcae61a9ab68bb264d8389
- TLSH T1313147502FFD0614F3B39E7394BB5B1089BBB8A69F25D61D4141464C5032A18E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.