General
- Target DOC-IVPQFQ.zip
- Size 914B
- Sample260804-kbprgavgjb
- SHA256 e722af15b6dd7385e9ccdb075d9a014eb6353a45f8373861ecb15d7376c9d508
- MD5 6965a433a2469d53caf2cec8ebe0784c
- SHA1 059e0e362a30962efbd9ca2843a7923b7f14dff9
- SHA512 907557c4719db0b5e1dd08b51f9a9c4c31e62f5afa429390a11a327b4d9b65e0a9ac0678b534907878c455648c269587a145a31cc33af0da77957a943d1e270f
- TLSH T15711843F5A89C95AC40347FD48334896C50862480147DC1AA1F3BC32AE9196A5F7F042
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IVPQFQ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IVPQFQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-IVPQFQ.lnk
- Size 2KB
- SHA256 0e980ef253e11ebda1255d77877608443996972717bbdb48e8687abc507d9ebd
- MD5 62ee23f11484d09d6961c91292baf8a9
- SHA1 21acf75806c51d9abe71e6f51e8064be30d5f60a
- SHA512 e20203114f1fa1407a7c5f112b3aa9b04285a6bd4b2502a51ea0d836e1de6693cb43563b892a5cab78a43e56391e1a43f834101c1630b839fd3931b8344d1e9c
- TLSH T1834134402BED45E8F2FACE76AEBA374148BBB9618E60C69E0491814D1462B05D977B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.