General
- Target DOC-NVJEPZ.zip
- Size 970B
- Sample260804-kdrc3svgmd
- SHA256 f7df08a78cdcd40e92c0d53c68eb88eafa519fbbaf63541820d63200216d6652
- MD5 c8a0c939f8ef50c4fdd59bc940b3d71e
- SHA1 82849b8021d2a1a40526d472cf96a7ebfad4adb6
- SHA512 c7566e6d7095b1a48055a0677e61d54d616761a482680343f615fcf3d4e412e0c9dd659ab097c9ef00abe77b2050102873bc76676e8bbd2c7c884c1336533003
- TLSH T1B11188EB40E2058ACF520D3ED421A68A12514294527A7D65BF66F718A8C4516DCB9311
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NVJEPZ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NVJEPZ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-NVJEPZ.lnk
- Size 2KB
- SHA256 540c8a7edf7b416cd9f6f39ca0cd37617d0d8c43feb2285b5fd201b965a80ac1
- MD5 9ae4d8aeb249b7db71681592c18e4997
- SHA1 d5060f2491ee80c5b609479361608c585dd13013
- SHA512 0ba6e89864d632ef047c74b3c7c00f0a02e4af29e888eeecbf319ce7fc028c94c7c1d8184972886f8670d667a894a9162c8d74b9bf714934052d2e2270fb6cb0
- TLSH T1BA5166543AE94498F3FA9F36E8FE2B90057BBD651DB0C59D0C51810C0412B02E4B7B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.