General
- Target DOC-S8VOYO.zip
- Size 855B
- Sample260804-j8tagsga53
- SHA256 ecafde155f54fa33beb45110ceb9305f5e95ba6c17179e9b7184e8f5b1a43f05
- MD5 b941d28bd96fbbaa99beb1ebe87bc00d
- SHA1 dd242bf6df3adc67ab16db27f7795c7040bea242
- SHA512 976fd09f98aa51a85a13b36e2d750f425bf38e297d4783675633869602120923f47a57404e99c000893f95edf825f24492d1995e50566daf5e3630f0be5e9cf2
- TLSH T10211962335F78D11C8065078F4F03E0E05661B0CE0755E6EF3B1CEC94A734847906E12
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-S8VOYO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-S8VOYO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-S8VOYO.lnk
- Size 2KB
- SHA256 26c6a1f9fa283d2b2eccbee95735e692690edece8ba1b9195d40e02791b6163b
- MD5 380edce0521a0d0e0b5b5c1b31c35999
- SHA1 d0eaf018660bd001f158e841ed45350629aa2c2b
- SHA512 ed4d3f4ebd588d4ffe886aee1287ad0e375bd126e5a3cba3fbc75601141144426cccac0738e7a8c573f8c1f3799bffefd1e22476347e0946e871aa2f5625a6c7
- TLSH T1C9416D903ADD11D8F2BB5E36D9FA2750897BF4A5AD71C6CE0900810C0432F05EA37B56
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.