General
- Target DOC-VWGYZO.zip
- Size 582B
- Sample260804-kegv2a1sdy
- SHA256 a698a5422cdbd15a9218b7ab5316c28e5c85044e8c72742862eb70d15120f6db
- MD5 a6c27fc4de3acc2f76cda79a701b8fd5
- SHA1 a20b087f9453d6f3373f40b9ea48d61d312a81af
- SHA512 b95965a17ad0982942892c294353c8176bd44f5520ccbf8794c7a9a5ce6a76c53e6b062ca8d055cba1063258a25820c2d67b053690193a50cee38582eabb9edc
- TLSH T116F0E1A75568959BC8565C3A616B30FD0A6D984361CB71964312E70BA431083BC74590
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VWGYZO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VWGYZO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-VWGYZO.lnk
- Size 1KB
- SHA256 0c110ff5d8c7eed6e0c9d1a923f9ba72482bbaa5b8621e24ae54734ff9826592
- MD5 a134b647bf84a010342efdf9c3a51e47
- SHA1 f513b8e2544b85ea0905f37ec634e563597697ec
- SHA512 e50e852642799ebcb8fd28fd4197df34d78c78ca5d71eef19cb10aab7751636b7ba63d22bbb54c01fa4fe66bb00767d5075641684c3eb549488ef0874c5f9b53
- TLSH T13B3147542FFD0664F3F78FB798BB9B2485BAB86A8D20CA2E0141454C5432A15E13AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.