General
- Target DOC-3V3YOT.zip
- Size 590B
- Sample260804-j9fqsaveka
- SHA256 1af5337ea1fded098a0a44dfd724f5fc02b3ca1be3132b858f976070032da295
- MD5 2edd3b0155f6b472a8dc60f89a4181cd
- SHA1 909bb95a8087dfd306577b0358f8e3bdf5e4c808
- SHA512 0477534a94da723de78dead2b8967922e10a53a8a2d1d98685ca966b8d08f8769d9272f40b9c56c95cf2c07ed422a54bb9f8015881939a6d772155cf5e2b45d5
- TLSH T1E8F041F1CA281A5ACE28C0B427365B2883CA5483128BE21304B9FC473880A265FF5AC4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3V3YOT.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3V3YOT.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-3V3YOT.lnk
- Size 1KB
- SHA256 4132ccb242c019b5fc798615aa36731e44a0a840455e8d9359897845b5ed888c
- MD5 2c4ca3344111c060cf7d055480f0cf35
- SHA1 8ddf7ee86f18033a74460fca7df365b3f05a49df
- SHA512 f0b2b1344b0df6978e6d97ea9e08c770e457fd0e308a7eb98cddc2ac65502fe2fbc88df60e00ad2f48af0294410704e85cac3416ff55baac6c892adb0521b931
- TLSH T1E23197503EED0624F3F38F7294BB572089BAB8598E20CB2D0040450C1072A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.