General
- Target DOC-VMJQ1G.zip
- Size 589B
- Sample260804-j9jgnsvenc
- SHA256 f040f43dbd62b93f254ae15d1618e5d351b9b6a36d6621921b7c2ee9e9646efd
- MD5 6d3b373f4a007a94a7bb483795c5a58e
- SHA1 7ac2210f13b182f5f64bd9fccfd58d802512806f
- SHA512 5ba5cff7899364f65bcb8902376d265c5683f9929d12e94501bc142b9e16dddefd5b689bc5f44f79f6f33e429c68efd76c61db5566ecc972e024187a25a0c024
- TLSH T194F0E1FEDB951638EE199CB02ACFB51DFEC19543131986717725D08239212E0A4BF017
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VMJQ1G.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VMJQ1G.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-VMJQ1G.lnk
- Size 1KB
- SHA256 f6e482fa7da15615666e7a7612e89d72d05d5140c0ed6cc9d166c33576b77169
- MD5 f37490a8982f7284262f880c308a7d24
- SHA1 042b70d541b81ab7d5d65b38954440fc8f32aa7b
- SHA512 42d8ee232f017acfb15909dbfe5e11c929ced58a4e1981bc4b35967fbbad6f22ef48c25e96ce1ba93dd61c5d474ed4e359b18830f82a69768057ca409e51d6ac
- TLSH T12531CB503FEC0624F3F39F7398BB572089BBB95A8E20C62D0040450C5432A15E53AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.