General
- Target DOC-X4GVLV.zip
- Size 597B
- Sample260804-kbftkazzhw
- SHA256 abd28ac85e6af846ab48b00b344f3ccba3fc038d7b3420a341d230f47435b8a6
- MD5 5ae9254c7ed19ba5ec0892b82b5c971b
- SHA1 60c1b2372866620597d228151098ced496210234
- SHA512 d2b93bb90ee821c3ac66c3ac7d3018ff5bec2165a7e04aa674e0d607582fc4cf8b8751fea2000f2f721ff4381d6f4d9ad35214aa586397813d2b57711b86a1c2
- TLSH T1F2F00C26C1D0B9A9DC0646722221310E38B2C4B0211A7B0296ECA88B519CB2CB9832B4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-X4GVLV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-X4GVLV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-X4GVLV.lnk
- Size 1KB
- SHA256 20d35680907d9eaf3667cb91667bcf2a242b66c26baeda5be9662046aa227d53
- MD5 5f950ae5891caa68804163e2f84a02cf
- SHA1 7035345954df6a317e04f7f079b29d6d76d17571
- SHA512 96edf0dcdd316d35c85bd31d7afc3625aee7f96e31eadadbd2df21975db9a6bcfbec9bc847215ec234dbc2ca7c0cd36c3b0c47993c495da3acde813b342e1c57
- TLSH T176319C402FED0614F3B78EB294FB5B1485BFB8668E21C61E0140454C5472A15E13AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.