General
- Target DOC-VINFGK.zip
- Size 937B
- Sample260804-j9gcbaar2y
- SHA256 a3ef0a2e9eef5ea75af6050f5b86261ef105a6eea17b0b425be19c9369509e7f
- MD5 a53819573939858dba5c613c0addfc9f
- SHA1 2b9b2b657f4ccbb86f34516854f97d4c4c2fa555
- SHA512 5b28d22759ee114f00f58e9154ff3d8195c0bdb2e815888b66065869139d187c09abe649f0c1b5aef4dabc6aba1f8120e7096c0c95c32c8bcf08a8bed607b3c1
- TLSH T18211B36A61220502CCFA08FA98F87F82E57C694B159E9DC60BA8B24C349110C6B34924
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VINFGK.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VINFGK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-VINFGK.lnk
- Size 2KB
- SHA256 90f18e7582b0fae91d56a56a5731305eb640f3f4027e0ac6483c52502acd848a
- MD5 34bec7022baa886295e157f1035ae19f
- SHA1 e6d520ea7dca1da1e9c9db11c0d388a0fc526d5a
- SHA512 e2c1ffe1a20c74b48d99e9a3ac1251f71b99ba51c557140fdce6b37f0ac500deb3a1e886e9f4e179690e05c21abd046280fb611b47eb0a465b92f30f03cbd30a
- TLSH T1B9414B803AE901D8F2BB9E32EDFE3794487BBD51AD71C19D0940814D5422B05E977B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.