General
- Target DOC-YRDNTV.zip
- Size 914B
- Sample260804-kenctavgrb
- SHA256 77345eec89fcb2e92e0a3436d64d7d548dbfe514d51c020a31c7e726d8f16a21
- MD5 b1845ca84cdc799cedd4ac84f6bb797c
- SHA1 4d0f766d1c7953a27bb40dffc707f87cdac25974
- SHA512 c344724a1991ecbc56ec0b9ded487cfd2f9a310a0ff88dec60cb557de08851cda8a61bedd0486f939494028b1adf2197ce8fcdde6b6ef51dcc6e249c3062e18b
- TLSH T10211E62A2FA9EC86D3C1A5F1823243F3B338CBB420472D676B109C048E71361C9CA440
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YRDNTV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YRDNTV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-YRDNTV.lnk
- Size 2KB
- SHA256 d3e25dbce74ab745da2d9d48e8c2f27571968f965da1c5482c6e3d27e64d9db8
- MD5 396d1eab00bda4ae725ab0c05700851b
- SHA1 10066e3044ecdcbcda95a4679eab3b91bb22ca54
- SHA512 6265420f83b529ef35fb5823bd1ec068fa32089e27943475dec4b967a87262b3539b0a451b9e0b81dff515af78f6724d59f0100ce80021f6b95fc3d805ebbb8e
- TLSH T1DD413AC02AE945E8F2BB8E72EEFE2791457BBA256DB0C64D0D50814C1422F05E573B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.