General
- Target DOC-7YRVIT.zip
- Size 591B
- Sample260804-kbrk3agb35
- SHA256 f176eb068dc9486213665ba64b7d746be0acd8e9ff90ebeb341b6c82da8e29dd
- MD5 daf08d54995b6ebf93f709f672c356f3
- SHA1 3494af3844400082d6a1d7f4acffcf1965b77ff5
- SHA512 89668c6e4ce150af5df7e257f8dadc517fbf69acb4eaebc026177fb4ee7c89e3c6bf6cba193b49d8f33b0cc506d1878567ccf2bb0c888d456b0db926310ae77d
- TLSH T1CFF0E1157742C454DEF168F2545B77725E608806551943EF1238F65996188840B8FA97
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7YRVIT.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7YRVIT.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-7YRVIT.lnk
- Size 1KB
- SHA256 a01e315514560ecc5cc08599fa3759026bbb4944768250085c619eee552979cb
- MD5 a853a75f9619e33d130da456183b7999
- SHA1 fc046d2e37101f231551de9d46489681ab0994f1
- SHA512 1f49786c5b71644881bc35db3871db6b7a6f80519c7e70598c70a6f65396a48afa6b1a9d2cc06b46b133117db3cc0f57e2c7085f1555dea2b1a37f5ab9ac2bdc
- TLSH T1FA3170503FFD0614F3F38F7794BB572485BBB9668E20C61D0151464C5432A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.