General
- Target DOC-VPX6R6.zip
- Size 879B
- Sample260804-j9hkdaar3z
- SHA256 22cd97da152f5d587b5eec3faa6b5327f6d9f5fa3b254a12fbd6c124e8fe353a
- MD5 4736401060cb5a382643c928a635df10
- SHA1 873acb383c317eb52a68151ba011b3b164759967
- SHA512 6761d69d6cf0b2552b902d7ef6a954dfc92baef8f5f8dc5d6e8a6393cf00f6ce959dd1daa0511400f10ff743d8100c833a5486884ab9794430e399dca8bad154
- TLSH T1B51163730A21ED4ADCC2E032805EBCCC505EB48609104AB02EEDFC864E1D9883777825
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VPX6R6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VPX6R6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-VPX6R6.lnk
- Size 2KB
- SHA256 f082a7c69f4956bc5f7757a1fd732d28c1606cfb1e269846258e5aa39cc698d4
- MD5 241fe139d0781acfedbbeb825c814ff6
- SHA1 2e107e6a68de60382c9aa2fae0bc718ce3076fdd
- SHA512 538de4366378f8c95e1f5bba5a3e2108a556df5fa5cb51b9342096372847392e219ff87449a6b01031521c2f2c6699e9cfc494c4c42b3aa89d3fed0534c2626c
- TLSH T1FB4163402AED01E4F2BF8E32ACBE3B41487BBE526E35C68D4451810D0822B00E977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.