General
- Target DOC-VHAUWH.zip
- Size 592B
- Sample260803-qswh8s1vbv
- SHA256 1e88aa22bb17f5092de3e8919050aafba0dcbe020ab64bfdd7f06d75e8c9112a
- MD5 a2946cd8568f382fac776dce7702e35a
- SHA1 47831187d26d715094e7eb68db77ae947b74ba32
- SHA512 3e8ab893b9db1633fe0f5b463c7838ef840d53ff1a9843f397b18ba43cf229b0bdaf1f7b29d13dd0ba6fafed59e133ffd01cb6c124b127ca1bd297ed3914a870
- TLSH T1F4F0E1C617821BC4C70BA4F77A113478A5C93F54002BBA896639E1D826298936DED910
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VHAUWH.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VHAUWH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-VHAUWH.lnk
- Size 1KB
- SHA256 e809317139331b8bf394fcf57938537cb471afc425c5a64b2467638c3cb14ca2
- MD5 0041ddd48513b344148a7ee9a741b680
- SHA1 c2166fca239f28d0363c1a6969d098292b6d9224
- SHA512 6f47bb0f5a98ea79262e4fbb3c0828e312fe3b314a0890f20b2615dd015c95e406807233286164755697f43909446608bf978c61657e73a580696ea5a3d549b3
- TLSH T15F3147506FF90624F3B78E7398BB5B2085BBB9669E24C61D0141464C1432A15E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.