General
- Target DOC-0V5YJ8.zip
- Size 836B
- Sample260804-kbmxwavfpg
- SHA256 34de29dd577ebffdfb0f9e51939b5a167c571dfc77d005d5bef2bda5845ba9b4
- MD5 97716aed2c9dd87fd3d75bc22c1d6557
- SHA1 8fe2d336f86f679202bd7f2d2567b5e0db04c2a5
- SHA512 05676831ba85dd0e69dc2490263779f3d763f4d11a23d3ce55259001b464d357bee7783cd6782e4e79d97d8c75c6324fa2f61b707d243833ec66b5ee76cf6735
- TLSH T1EB01127D234F998ECE398C322570C79A945D4F118AD1AE535624E64A48061944B4FDD8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0V5YJ8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0V5YJ8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-0V5YJ8.lnk
- Size 2KB
- SHA256 ca9800ad1fc9bd1c516389141b3bff2b00a8c386323902e3358ea954026007d4
- MD5 f0151bdce1d7dbff816c8b572df28a32
- SHA1 a189ee523709c58331de0ac7ffa234c32757b213
- SHA512 08a1fbe7c5d163e8e0b65e0f0ecbe69448fe9d24062f5f0cb2db9b22252e979ea6817c0c12339f02a73677da8151cfcb565280c3ca1d53ca448d45296fee9b6a
- TLSH T1C6419E842AED01D4F3BB8E73EEFF679084BBB8222D70C61E0941814D0422B44D537BA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.