General
- Target DOC-OVNC49.zip
- Size 927B
- Sample260804-kbnt6sbj4s
- SHA256 a85b1ce011c7e6556a9f2f5f1bbe909b15f3d9080b0bfd2ab354f40af661be2d
- MD5 e942fd1f41bcabed7596de87da5c5f24
- SHA1 eefd4eb7017cdab30895d356fe5dffd36ff0563d
- SHA512 5b89fffac91ed63e6dd137c245672dabac9a9ce2f95d1f1d0941cfffe6c5f17719abc1acdf9846ffdabc392a254b121a474a50f2221e1db4e7721aa26928b246
- TLSH T15411E687E1386418E8F285319AFEB3E7D33C8916B1CE2C0FB4F2698E5E504871974467
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OVNC49.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OVNC49.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-OVNC49.lnk
- Size 2KB
- SHA256 945f0765cd561d90e8043b4998200a6a42922f9120c57899c9f5a5d35d121ed1
- MD5 db505021f4d183787746fd02c8ca93c5
- SHA1 99cc372fc541aeca093de498dd6f9042571bd2bc
- SHA512 b6c8eead8022bc5238ea612e13a626fb76f2b0277ae8826090f2aec6a19cf2a666664024b23ebd73d4170c1ad42ee19345a956fcaaf42210496e3b7a3daff9d0
- TLSH T1014147542AED40D8F3FA9F72EDBE67504977B8625D30C18E1840810D1821F01DA73B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.