General
- Target DOC-GV89V8.zip
- Size 588B
- Sample260804-kf3twsbk8w
- SHA256 237954a746dfe0805f3c6ecd38223461158b8c6e70f5165430099387534acf9e
- MD5 77e0ff8f62d6ff83d5937dfc05193bfc
- SHA1 7fe95551be42af8b9d9bac6288fd1c198004de75
- SHA512 ad5d4c6263b1728243f32d65310be3bb8bfb9cec59c5447dac6ca33c60d51a236a67203db11d76d1abfb8d4f79440d0abb49800b83040654c41300685ca8f026
- TLSH T139F041FBC80F8445C06A823AD812683A092E906C9285D88F02ACE6056D3392F3A6ACC1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GV89V8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GV89V8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-GV89V8.lnk
- Size 1KB
- SHA256 4101a120d81d4998f75871cd6fbeb17b961b38790b0ccb84793e157c4b6b29ec
- MD5 2323c889705c263677a6a988479b965e
- SHA1 6c0b266b05a5b4c1c6ba43c9f126abf365b78624
- SHA512 3992a0604deb8593130afb5955b6e6577e180412930c9cc22cb4ab9b1ba5153515d5aa48ccfeb339eca6185ac56fbf1d4a3fa59786c8eda198548f3ca7649bbd
- TLSH T10A3197102EFD4624F3F3CE7294BB672089BBB9958E20CA2E0040450C5033A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.