General
- Target DOC-1VRGZA.zip
- Size 969B
- Sample260804-kajh3aar7z
- SHA256 93f2dfca17a04d041fbe214a2145d6911f0c141528f5cf1a8a97f06cb61ec95b
- MD5 edc752b1c411a0dd52c46148d98b7d3a
- SHA1 6059c5ec9b27776380292f098c14d72109d88938
- SHA512 22b32a66c0868193bce004aaec1740bc666e834577d3244572a2ad92b66241db3dfeaf460dfb6c3a0cc43a78084d2a8cfd1a97c2c3c50b6fc67f414dfe24c1f9
- TLSH T16911BB21EA38AF1FF8F7DB3234655190251A1604F955BDDF8E7212F28E844947FD1150
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1VRGZA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-1VRGZA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-1VRGZA.lnk
- Size 2KB
- SHA256 06e2b530169cec98ddda8dbba9fc07ab7e3ac844c0eca71a198f7317735bbde6
- MD5 d5b1e1ee4c4a448951e40198c78f1caa
- SHA1 7dbcd1359f643f56141f93137335c39023eba571
- SHA512 659daca7eef8f52624094d7f534cd67c4394621aa55a77dd3cd044ada2e4eb4e7e9a9e8e4431dbe87b5b60e7e529bb86228ea6d2e17b2effd3f872d8c5737e79
- TLSH T1A65135903AEE41A4F3FB8E76EDBE275145BB7DA15D21C19D0880820D1822F01D8B7B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.