General
- Target DOC-F6VINC.zip
- Size 588B
- Sample260804-kajttsvfjb
- SHA256 21f28402f417ed992a8bb8e9d97429a5263c06ea1fbd29ed558539b240354bbb
- MD5 f6b44f55eabbebdf7a439338164e240b
- SHA1 d8fb125cce4273180159baf859c285c808845ec8
- SHA512 b92d24f46a21601f702fb4d956ebacdbd3b2c85e74d94e79e143ae8c8b8119747c1dd16b42d8b1b4fe81fe731aaa0227c7c01e594b3f258f089b5b1a49e7a572
- TLSH T1FBF026B1DF067E00F756657857691A144B6CC5C40E3D17C78660C41E787C8D2475F172
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-F6VINC.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-F6VINC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-F6VINC.lnk
- Size 1KB
- SHA256 5adc2f1873f4c0f403d04cd2a5aa0da2287a3bda9b4028b194f38dd7ab0c4567
- MD5 d8d2eb1113e51729b89fb2dad843d5a3
- SHA1 cd418397f0d4ba74ebf4d34c164597757fd54dd4
- SHA512 8b7387e430d3ca95d75374b7f709bbcaf74128dbbaa189f44042725162dd6ebe056ddd1eb20d68395bf0085eaf2db8102124692115db2941c16cba82faf3e2ba
- TLSH T18A3147503EFD0628F3F38F7798BB572489BBB8568E20CA2E0141454D5172A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.