General
- Target DOC-YW0WV1.zip
- Size 591B
- Sample260804-j8tw1svdrb
- SHA256 43127f2edc96c8766c9ea6596cf073c1ace9c884fefc71dad9340f31fceb8581
- MD5 b61ccf3125da11b8c4e5132a92ce4cac
- SHA1 1f4b7f460d4284f6e1359043dbf2feecc03880e8
- SHA512 cbef1cd55a2f3ac16ed18294cb3513d731f74bba3c1ce777e588710312eb181e371e1aed33c5176896d02ff10c642596586553af9ba57afed7ce2b7d5926a2d9
- TLSH T10EF0E1E3042A1FE9D1C6E1F690EE6B966785DF03391F2101119869419C819522C1E47D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YW0WV1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YW0WV1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-YW0WV1.lnk
- Size 1KB
- SHA256 3245ba5dcaa449234fb6937a8645f386ca6d856e6ff032c6e941e40eb1e099a7
- MD5 d20c86f8c5412bbdeb16539af12893f8
- SHA1 5fc58642430248ddfe843fde3a657b1d894dfa46
- SHA512 420e178f0cb355246f3782f9e0b5d3dd26754452174db258092446d7e25174fa7574c9286b7d0b69b9668d8ffaac09d82401f26def71bf99c33195c68f0cfbba
- TLSH T1703197002FEC0624F3B38F7395BB572085BBB8569D20C62D0040450C5032A19E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.