General
- Target DOC-S3VYS0.zip
- Size 816B
- Sample260804-kgczvsvhpc
- SHA256 8012dfbf10ac1b2763ca286f8e8126548b6e5d08ef877f1584e10e9982a05ffb
- MD5 9512d6c94d493badbc8e5ce3fd7985fe
- SHA1 b6f0b60713f83c51e7fce8f3b3c483e0d82e3699
- SHA512 73e7645560790e0bdb436c262b77e19089f1dc8c3156f7eb48003a3ffdb3543474d9863ac0d7e9324472c2a607b031a857029c15eb37e015eed5dba92d7dc6cd
- TLSH T1E901CA0EE53D1145E11345F5451F7627B03F5CF8C0AEA64D3710F0E65D521D403F9119
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-S3VYS0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-S3VYS0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-S3VYS0.lnk
- Size 2KB
- SHA256 044d5a5117350eac2e91d137cc9b56b7580465102370841c6f233656e9846781
- MD5 b3a98b2fcf0e1026d463c0af6b4a385e
- SHA1 8b7bffb9296dea1f6efd4259b4cb489fc8320fc2
- SHA512 281fce68972d2661c1c1ffc55d158bdb86b516461eb783c709f83b5cda5b12b7856bee83ea6e7054b2d7493ba610bf761da0982e2d5c5fa6d0f2a5ea0c55cbe2
- TLSH T1E64137402EDE05D8F2FB9D72EDFB6311497BB5515CA4C64E0840814E1422B0AEA37B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.