General
- Target DOC-PVEKHM.zip
- Size 587B
- Sample260804-j8tw1svdra
- SHA256 b2594c78b7746298710229ab80d2a9017828b90d3c0abe4e78f1db6aa97862ab
- MD5 f23827688ccabeb24155b3798c2f1480
- SHA1 0832b0b0745c71a7c76bb7e2341d82bfa41fdbe1
- SHA512 89f3118d989d9d323406e38f3be671a652cd2b1e1cb6c6b7e2764b267872f2f92b5b075fef0d043ccb5d145324282fc527a99e36566eeb4c7033af5ba36e3782
- TLSH T117F04773465C01D2D141F0301EDD72B517C384C25961AE3B5DB0D22D4C9C0F949074B3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PVEKHM.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PVEKHM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-PVEKHM.lnk
- Size 1KB
- SHA256 0dfdb2b3e7e35ebee94a6ed5670ae5e5938834fd0dc416aa171c20e44f74f07a
- MD5 c70241270f432b88b77b014e034bae89
- SHA1 1f3a641b7c4899f92b40ca85f276da40b0ad9ae1
- SHA512 5f7001a601ecc0f6c055e5dc57a0d1f0a322b0d840921cf56768a18f194fe384bc7d94ca0eb3d1e100b7d17bbcf77dacf3b66c9d9af92ad1f5d3431cac74ed61
- TLSH T134317B503FED0664F3F78F7795BB572485BBB8A68D20C62D4141454C5032A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.