General
- Target DOC-VV8VS5.zip
- Size 593B
- Sample260804-j98fsszzds
- SHA256 08d3e4af8bf87c934948d590d5b8eba448771f70658fcfadd56c96d24909e93b
- MD5 ef3b46c33e26654da47a548fdc2a6525
- SHA1 9f7066b012dcf35ce555d36d5836250e55592563
- SHA512 d51a57754da0c01d70f711ad72cf8964c56803dc68e212891dfc4143f438cddcfc1303cecde3bec4648199d0b2862369d9e98b3de75449c96957292d97bba64a
- TLSH T137F0476F43410094F95343FC146B31AAF234895380DE67378B09C5154CE017A6FE0C36
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VV8VS5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VV8VS5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-VV8VS5.lnk
- Size 1KB
- SHA256 50828373cf1cf41dd293ff9329fc206642ee39aec8fb605e631908ed9f1df6ba
- MD5 f033cd3aff169ea0e94ca92e2c735ed2
- SHA1 6c277dcf420f01a3966d629e429928b4ff2c7c14
- SHA512 7e38625c3a49888ad1b6a7dce7bde1e61fb1b921efde4678383e9df4f3ce4dfff17e1e1d7810840f2f6a8f212668a93f2386db77c70b3ea09c6009f1679ba609
- TLSH T1A83197103FFD0A24F3F38E7398BB572085BAB95A8D24C72E0041464C1072A16E57AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.