General
- Target DOC-HYRRDE.zip
- Size 582B
- Sample260803-p31ehazth1
- SHA256 7dd4c97740fb0b9d37560d7bc83b170328c4fa593b1c792308359b621060d6df
- MD5 f3915227a1c6e44d1dfa1f1a4a34cc89
- SHA1 664ad5af25d23fce3c813553c6493e825c451e2d
- SHA512 d2a79a627784e998c6398bc72df5fe195d82e5fac37418f6a5c3034800abb1fbc6a97fb33d81a9e536b99b6c87e5c03a39645fa2a219f823f97fed662b6ad745
- TLSH T1F2F096F60DAE8283CF0050FBC0B37E1540D6D066122F6F2449B7CB666970648BF400C0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HYRRDE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HYRRDE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-HYRRDE.lnk
- Size 1KB
- SHA256 6afe0b80d6d453927077f93ed81c6c4412998ee9f0e03447a0f8f54472826db4
- MD5 8a82f8adfd1c1239a63a39fe3fce0429
- SHA1 b372ce00aa9e645799e025fd0d1f88aa76ca4569
- SHA512 7f50955b2e56571a876b1716ddfffe5607ab4820860a3a02847f29db95ea3b154894f81fa99140eeade0df3c5470bdaa3378fed21924b2443c2007e2eba0a481
- TLSH T1343197402EF90654F3B38F7784BB9B2084BAB9958E24CA2D01404A4C1032A00E17BFB7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.