General
- Target DOC-WV0QYN.zip
- Size 960B
- Sample260804-kkrx7awbjc
- SHA256 8c162d6d2b2f1ac6a33b618819fd9e7b5bfac6749939fe553aa49f86035fa824
- MD5 efbbfbaeeb6806a77d0e911edaa37f8c
- SHA1 ba0132d790ac8783267b07b6cbbeb02979222e7b
- SHA512 0e72cc7c437695628e2a3cdd5b3886ea3633e031d305781e788f2860845e0182f02a6ca5c64cb9baaaf929dc6169f18c515dad37cc00e3c2f6f4fb179c47abc2
- TLSH T17A11C8E053E7CF0DCBE5883EA897973A455763C38039667D549BE3D24CA8CF086422B2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WV0QYN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WV0QYN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-WV0QYN.lnk
- Size 2KB
- SHA256 271e878d9c5e3df1e1599871b561158103b6515fb2d69d77c0c469e9d74ec051
- MD5 66b60021f649e77b9769b854a313406b
- SHA1 9d80cedd506074c414fbed68d8b9b9848e86568b
- SHA512 443f103698e3cd9191854fa60d835cdf04ab9f033fdf01f2fcea7e41cd020dfc29affee5cb48d7b8087231c81c885362b12d06af1d2712fc67f965caa294f980
- TLSH T1554147803BED00E4F3BB5E72EDBE676509BF7AA16D30C58C0950820D0822B01D977B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.