General
- Target DOC-YEMHGO.zip
- Size 583B
- Sample260804-kacqhsar5y
- SHA256 0bbce29eb87e08743d4fdda00d587b41d0c5d74fb40730b12e1b54e241656293
- MD5 9667d722f78476b60843e2bf94188c4c
- SHA1 9f3451f235c235ae37ef8d14810c9e2c38044f27
- SHA512 e0db616af6f29f864f5caddb25be0b16ce2ca4ca126e5c76aa539a92ba6dfa15091b71c1b6774fa1d437319be0a2193a48b5757e581aca16085cfead8e92809e
- TLSH T1BFF09635024F2440EA7250F040C33293631CA0DDDB471FC006B4EFAB093A78CA918B79
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YEMHGO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YEMHGO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-YEMHGO.lnk
- Size 1KB
- SHA256 6836ab5b724e9aa1b63745a30a459df926937c19ea039eef3718c138fd91e88e
- MD5 0fda3b8ffc129e401925a63ee42a846a
- SHA1 4d676880b365513ac2fd2fa831864be4543cb7d2
- SHA512 08122db8b6c7c37c767ba8d8c5babba71763451baa571b324fe2a14370f955753b4587d4b35a307469af386cee7134f0d701d9c2eb92cce290ca3300b615b7f7
- TLSH T1343197003FEC0A24F3F38E7395FB572085BAB86A8D20C62E0041454C5432A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.