General
- Target DOC-BYESCY.lnk
- Size 1KB
- Sample260803-wph2maxwcw
- SHA256 be6396ea37c8ad8c42da5e726af98c60330c2ae5f15abcebb92e03d82768b753
- MD5 f3ab2392fbf25b347c71662edd62c17c
- SHA1 a79ce7112b4e80b48890493a82822d38c82d32d4
- SHA512 0eb41b65dc38553dad56fea77aff73b0c63c613a2df1136c592ea88ac64d037464c56551b7aa5442206e4e6268c97e5077760a5050fff91be05f843b030e1e90
- TLSH T15B3147502FFD0624F3B78F7798BB5B2489BBB8558E20C62E0141454C5036A25E53BF67
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BYESCY.lnk
Resource
win10v2004-20260513-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-BYESCY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-BYESCY.lnk
- Size 1KB
- SHA256 be6396ea37c8ad8c42da5e726af98c60330c2ae5f15abcebb92e03d82768b753
- MD5 f3ab2392fbf25b347c71662edd62c17c
- SHA1 a79ce7112b4e80b48890493a82822d38c82d32d4
- SHA512 0eb41b65dc38553dad56fea77aff73b0c63c613a2df1136c592ea88ac64d037464c56551b7aa5442206e4e6268c97e5077760a5050fff91be05f843b030e1e90
- TLSH T15B3147502FFD0624F3B78F7798BB5B2489BBB8558E20C62E0141454C5036A25E53BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.