General
- Target DOC-Y5M5XD.zip
- Size 590B
- Sample260804-khymys1vey
- SHA256 316e100c26542e6945b3548dfa7da8ca077fd919ec0be475dd48e2bc4edc23b2
- MD5 bdd6366b42824d14e10f9023318bd70d
- SHA1 48920ce203fbafc6ebdad9b1c6701e1755f94904
- SHA512 900e5e21929740f2d46f8d1872c919525d908fd6be1e9acd0831f64e1cb1e825a4543c5b6c67904dee35821045122ddf67e5b7374d1eb2cdf14f718fae21080b
- TLSH T17CF026A6960EC603D207F031AA34355593E5C5CB46CC1F5F027EFE1F6050588EB248C4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y5M5XD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Y5M5XD.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-Y5M5XD.lnk
- Size 1KB
- SHA256 8d624a5cfda307845fdf512ab49ae62dc85f62f4a6c99963ada64d7c727d9ed4
- MD5 5e0d832a1d485f4ae78b41fec9a14e16
- SHA1 9c9a0a012cce927035c9f745835ee454d40387d8
- SHA512 2b5eba507e4e0f575d2a8d90ea71bbc747da7e1be4abc4dd9d3acbf295f6123ba3f890deee30f0697e0d5f7a1177f8baf9becb3106a949b21657460b8d7c87e9
- TLSH T10E3147603FED0624F3B39FB694BB672485BEB9A68D20CA2D0141454C5032A15E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.