General
- Target DOC-V3Y6GW.zip
- Size 957B
- Sample260804-kfy6psbk8v
- SHA256 9fd7b98c9da6a68839c9e39107b7c9b8c0552d52aa72da8b26899897b5472bf3
- MD5 0d6dc06acd953f6b25092643a2dec944
- SHA1 c3bca52e6b651dc885e5fc216bb0d7481f7b6626
- SHA512 0d4511335d4cf50633c39f4a2c6ef6dd0a6e40bacb06a8af8c0cb37e29a411f6de3244e01bace2979975c2fd78d0419d08932e7a03d4592e5228c3b8c26e6524
- TLSH T1F211B7425341A3D1C80683FF08B9F70B6079B5881826A6A81436E08BBED40FDDBE9C47
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-V3Y6GW.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-V3Y6GW.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-V3Y6GW.lnk
- Size 2KB
- SHA256 c1e2cd4f2a0486f1ab7a63e9557736f327375f96582722db85da74beb0e98441
- MD5 807ad017dd1dddf339687752a6c4c0b4
- SHA1 a247ff97a4dcb7d114a98aa27156ebeac23fbcf4
- SHA512 51728b084ce15c77340d4624622e44d3263179ec6f77f7ab5b57319e01cd6a6c4ef1148853b1e4de796d233017b6b5c7edccd72e0834f9ef780d2065251d7909
- TLSH T17B519D8036EA45D8F3FA4E35EDFE339148BBB8525E70C5DD0C40820D5421B01D977B66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.