General
- Target DOC-VNEVVX.zip
- Size 590B
- Sample260804-j8tk9aga56
- SHA256 653f3e8589d8446e750077126342c618af6d646222f8d06d7f3b84026a154ac8
- MD5 f92f331c46a7d86019dba1422b35f540
- SHA1 56de9e230fb166a58e54818d31863ceaa834fda7
- SHA512 680622e9e11009495434a552af798a23a4b9faa7712dc7ecf0a1bad222df20f9ea1875a7ce1a87ebae27dbb55424c5f6dd92b805987858d4e58a7d8b1dc31008
- TLSH T1FCF0E193B1015808EB63E2785C946CB9E5B6878259EE95079731F40A197601D8EC78A0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VNEVVX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VNEVVX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-VNEVVX.lnk
- Size 1KB
- SHA256 12c6175c439277d8e9e0ad981995b4c12db7b944f1ac4683a0d384dbad8fa15c
- MD5 29e1261f15526c6cdf9ed6bd12e5895e
- SHA1 cc01865e3f2bd5630208375efa75aa0c5d8de83f
- SHA512 4333b5abe3dda9536c54de120baa8e1c4da383873ddbf222a63c0215cbb1cc54542a8c1349c7a91b96790c8dc02a651661cebc0ab3c4bc42768e1f5d23be936f
- TLSH T1853147502FFD0A28F3B38E7695BB572489BAB8568E20CA2E0141454C5062A15E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.