General
- Target DOC-M9VBVY.zip
- Size 976B
- Sample260804-kdv19svgmg
- SHA256 7cc60b71168f2c9cec4c07feb83db40481ffb68f5510c9e950195df2c4475322
- MD5 09577a436724ad9a6f61a83565ba682a
- SHA1 977a717321b3bdc569ddddd6a77e9cd8500e3358
- SHA512 a3c0076ed7643c75c2fecb6f3b826b45c2936ef88ec80efb85a1cfad6efdaccbefcba88d3a19da328234cc033b43b4e9cad9c563f5d01ad3ff96be54e6f7b742
- TLSH T10D1198675AFFC447D594967D412B3D2D09A0C18F070D44D15906D766C4932696F12362
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M9VBVY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M9VBVY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-M9VBVY.lnk
- Size 2KB
- SHA256 41e3fe1bc9d0b86f1a9a3f31ab5d06b267282558e9fd10cf877734949463935a
- MD5 35abd8a4867e79b224b22fc939fa07db
- SHA1 c0ee1007fa5efd0f5b80a0fe56b807c88fdb36af
- SHA512 a3ebf23b964102067a25f36ca6ff3ac6a4bd73142ed3424f407f901b78ea5afcd288ebd0b8cba386ab1970fa6599b9fe2de49f0dd7bcd3333977cc150d9d0074
- TLSH T1DC5149902AEE0199F2BB8E76FDFE37518C7BB9525D71C68D4850810D0822B41D933B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.