General
- Target DOC-YBIO0D.zip
- Size 594B
- Sample260804-kbmxwavfph
- SHA256 6398d0744af916239dad5c2e75266c5a8dfa3f02bffca807f7519a97a28469b1
- MD5 a57022a59542bc59ecda77b89d90778f
- SHA1 e30168d23778010d85e9122087983f62f707fdb3
- SHA512 521c6810dab9bee14d4349bc8942099fa81482e68b5a96b8fd2075de1b683db1e93c50f426ece15f154209b8fa05dbc8a57ad6be5afbe160a57afc8f46790e51
- TLSH T1CEF09698464248ABF0C5F5F559777D390F2C6441000F49DFD156FC26A86636F06E02F0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YBIO0D.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YBIO0D.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-YBIO0D.lnk
- Size 1KB
- SHA256 9758f6b520473b14df2537bebfccf84113ec2b22a9eae91871127d4b86b437ec
- MD5 5ab158f6bb5977e9ccd4b78fc48376a3
- SHA1 532b8cbe9f11a4b498b12bde1e656e9255995e05
- SHA512 91ed12ffd1dee4113646c76d06b4400e23f8218973ae06b80790df482c7f18ec9be517b3e0d62cf27b998ddef61b08784d14957f174d206308bfc244814778a2
- TLSH T1613147503FED0624F3F79E7794BB572485BBB8569E20C62E0141454C5072A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.