General
- Target DOC-BTWVSL.zip
- Size 875B
- Sample260804-khw45agb98
- SHA256 79572149b695684f5f4172493ba712054d165b4903ec544a98bdaa9f8a8885b0
- MD5 8e0ec70e0c6b539368a325e9c83da927
- SHA1 ab1ea53d2c3b3a8d95abfec27132cd5e7a2fcae4
- SHA512 781a3b4d2467070b261ff2c7c89138740cc8052454b20e1fef406ee2ce2251e396395142ee6f96174a422f6d5019c7615e7c95e29f92f076c073155df4a50303
- TLSH T1341112A31186595AED3C40FA44DE258066F906E9C43F27A61D1EE44A82C8149DE6169A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BTWVSL.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BTWVSL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-BTWVSL.lnk
- Size 2KB
- SHA256 eec5dba07d6631296322d15acbe4992a921dbf2d43fa8fbd4e53d08a50ec688e
- MD5 fb910b60f78a6f87383b4252e4f19517
- SHA1 82eaa602a597b26a0df13842873937a449936313
- SHA512 c4d8074789f0115f68db7d909eaa3e29936ed5e180797c9cdf1df4c20af3524005943ad04678b8e915cb87a6a57483204f7d5de4bba5575d0341b27c3b75a3dd
- TLSH T10A4136902AF915D4F2BBCF32EDFE231149B7BC924E30CA9D0840824D5822B41D937B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.