General
- Target DOC-VUANCJ.zip
- Size 966B
- Sample260804-kem22svgra
- SHA256 5d3cd4a0a2a1b08a2afbaada242ef84e7563bcc2283160df1fa2c31b16e7cf7f
- MD5 d9c4d502fbaa27bb73eec6e03b485729
- SHA1 8efcf820569ef6d25145cefe29063d1d18d32c7f
- SHA512 ddac34270e359694a2caf00a8ae8b1aee45a075c9154caaf3404fcfc2dbd34b0d5f9facf984ddeff470001f3dd37a862b89a3ad8de4bfac5e7a703a7ca74e440
- TLSH T1E71154AFA2919154CCAB89FF9010315EAC34736844CFB419A47E7DA81875014EBBBAC6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VUANCJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VUANCJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-VUANCJ.lnk
- Size 2KB
- SHA256 88ac0d6ef553892e7d4c9195b1cb252b0c6e2c267e4c07fe15098b6e142f2c73
- MD5 2029c3576caaa2db17da2f40b5d7442e
- SHA1 83dc237800841e4472835d73f8aac8988f7b2550
- SHA512 bd98297184b4d7c5411ea9d7f9d8bc6f8d84f2057f5795561fe6aa791565b9438bbd46c7d178b05b8b760ecb6a4d829526897cf29da2257f85856aab3e436dc0
- TLSH T1B64135812EDE10ACF2BB9E72ECBE7750897BF8616D20C59D0840814C1832B06ED37B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.