(vn)[2023-01-24]thang_vanth.zip Apr 2026

: Phishing emails with "Official Document" themes, often written in Vietnamese, designed to trick recipients into opening the archive.

While the exact contents depend on the specific analysis, files shared under this format in January 2023 often shared these traits:

: Check if this specific tag has been indexed by the research community. (VN)[2023-01-24]THANG_vanth.zip

: Search for the filename to find associated reports and behavior graphs.

: Look for public analysis runs from January 2023 that match this naming pattern. : Phishing emails with "Official Document" themes, often

: The ZIP file often contains a malicious .LNK file disguised as a document or a sideloading chain involving a legitimate executable and a malicious DLL. Search and Verification

: "Thang" is a common Vietnamese name, and "vanth" may be a shorthand for "Văn thư" (meaning "clerical" or "official document"), which is a frequent theme in social engineering lures targeting government or corporate employees. Common Characteristics of such Samples : Look for public analysis runs from January

If you are performing a forensic investigation, you can look up the hash (SHA-256) of the archive on major intelligence platforms: