General
- Target DOC-5NRVWV.zip
- Size 588B
- Sample260804-kd4cmsbk3z
- SHA256 d86effe59e9a25f59f2778b1a6bc30ef5a0aa9320423ca02025fffd8f35373f4
- MD5 b449e2c60cb4e2545d24bd231774a23a
- SHA1 ed7cc3ed0e2852b997d0815ba0b1419b56ac9e23
- SHA512 890762074c513755725eaeb9cdb737ccd1855a02fc984fcad47999a9678c562f5b46a2e2e8af593eedac8c84b5799016b0dbcc8c407602932b922a8c77061d5c
- TLSH T1C3F09697059622CDF423C17C1443680054EEF0B047037B93B7B9D80A78011499F710D8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5NRVWV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-5NRVWV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-5NRVWV.lnk
- Size 1KB
- SHA256 aa2c01a6726926c8b3c930d19e343b9af58d8665c80b0d4322a4211bb7e5c968
- MD5 3691a4627f4af42c209b937f79e219fb
- SHA1 80c3de2f3c2a416427db360b7ebe341dc7a0b6d0
- SHA512 12e98dc811ac99f72436a9f6f6ee9172047db47fc6fad2fcd7c5fe554f6764849a95fec0bd83a2896635db7665faa93c3633eaeb445a4cda12c0fb6f271517d1
- TLSH T1903197503FED0624F3B79E7284BB5B2085BFB8568D20C62E0040450C1022A15E53AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.