General
- Target DOC-5GVCFI.lnk
- Size 1KB
- Sample260803-vzbvmatgpg
- SHA256 351f8af392112feec28af87c79ef067daed06a40b5804c3bac2201f47e8c1d33
- MD5 977e52f054d92df5e77f1a9c77481336
- SHA1 b604cddada8dd6e853be2a7351d65eb377cd1832
- SHA512 23b89cf0e21f39477e07259827217f8c187878fc6050c9d5956245710e5b5a1d2a3f3e6be79985d1803e964d2f4ffc5ded91177feabdf5545ddadab5fb9c8a78
- TLSH T1E3319C402EED0654F3B38F7794BF571485BFB8A68D20C61E0140450D5422A15E27BF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5GVCFI.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-5GVCFI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-5GVCFI.lnk
- Size 1KB
- SHA256 351f8af392112feec28af87c79ef067daed06a40b5804c3bac2201f47e8c1d33
- MD5 977e52f054d92df5e77f1a9c77481336
- SHA1 b604cddada8dd6e853be2a7351d65eb377cd1832
- SHA512 23b89cf0e21f39477e07259827217f8c187878fc6050c9d5956245710e5b5a1d2a3f3e6be79985d1803e964d2f4ffc5ded91177feabdf5545ddadab5fb9c8a78
- TLSH T1E3319C402EED0654F3B38F7794BF571485BFB8A68D20C61E0140450D5422A15E27BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.