General
- Target DOC-OVF5WH.hta
- Size 2KB
- Sample260803-xmcx9seb79
- SHA256 cfd95b9eba0b44a856181936d0247408d13183fc132943d06ed87e0dc2c099ac
- MD5 700ff0d15fcf6f37e78603f69426ec11
- SHA1 861f76f8d170728f35ee1d7021307761a7635d29
- SHA512 294ddf493a469179f783fb7203ff3ade165a491e8c8786d424c854c7e278108d533d9fe8cdfd7870f228af8d9080f16407d11979a9b52b0a7953c9e1a4f5c9bb
- TLSH T128514AFBB98663DABD325A9B2A2F508D549407071326D4B8F796DC409F8CE0944387D8
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OVF5WH.hta
Resource
win10v2004-20260513-en
8 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-OVF5WH.hta
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Targets
-
- Target DOC-OVF5WH.hta
- Size 2KB
- SHA256 cfd95b9eba0b44a856181936d0247408d13183fc132943d06ed87e0dc2c099ac
- MD5 700ff0d15fcf6f37e78603f69426ec11
- SHA1 861f76f8d170728f35ee1d7021307761a7635d29
- SHA512 294ddf493a469179f783fb7203ff3ade165a491e8c8786d424c854c7e278108d533d9fe8cdfd7870f228af8d9080f16407d11979a9b52b0a7953c9e1a4f5c9bb
- TLSH T128514AFBB98663DABD325A9B2A2F508D549407071326D4B8F796DC409F8CE0944387D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.