General
- Target DOC-6PVC3C.zip
- Size 597B
- Sample260804-kbm8msvfqa
- SHA256 141f2b5480889de7f5103ba78f2026f305ecd6b7eac7e30cbf087d95d28d62ae
- MD5 64733791074b91ec2fde2093206ce899
- SHA1 430bc5d3110eb9bb962cc3db46b5d1e3676fad89
- SHA512 5b91449909deb65681ad8542cf14ab7efb05465421c1847e1ec155b4373f3fbfbbeb484186fa2b257b8ce9194c478ebd700bafaf4b95e187fcb3a77291399ba2
- TLSH T1EEF0A27F55404216C48790B766C7F1E677432918005B68697D16D1F899E40812D5E65E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-6PVC3C.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-6PVC3C.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-6PVC3C.lnk
- Size 1KB
- SHA256 6ca49aad4be11587844c3586ae40438e4aa3a78b03a9797d6d57715a32b3f1f3
- MD5 6cfd51cda92ea033aaa201142e53c74f
- SHA1 1f3c8b6aa5c7232524fe2d0181317c3c10438340
- SHA512 ade2255b5991f938aa6d95f6ca95fe026cdecc415d3ecdc71c4f2789c9715d5c444f78169746bfb776e91808a87dcc92c8888961f1765fe4ae37c238ed6f37d6
- TLSH T150319C503EFD0914F3B38E7288FB571089BB79568E20C61E0040450C5032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.