General
- Target DOC-OGJJWG.zip
- Size 584B
- Sample260803-p33vmabl7t
- SHA256 eab0f746a1fd8de59d7c470b0675dd99a1677ea9379a1885da558971a7722bb4
- MD5 4b4de9294a7fc5ac56c3294682352f84
- SHA1 b0a1cff1fc32bedaf296fd6456492fcc93730994
- SHA512 ad6bd58da6d8d421837f7898cf183407c985c0e39426feb5dced113cbcbe92387d640b7f5999e15e22a1cad67b5a9a118231b273b78d61cce36d408052e2299d
- TLSH T150F07C65C55CC8FDC25659F9D5951F7533105825C2459A3F2C71F0D754F1C4F060D6E0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OGJJWG.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OGJJWG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-OGJJWG.lnk
- Size 1KB
- SHA256 fe600432e188b856ebb88002205e9af458984d21285b716e107a77d6d834bc28
- MD5 28b3711ef2aac1f1ccf5040671c6152f
- SHA1 c32e87d85b57803702bf2b3303870a4a8fb756a7
- SHA512 fdc2c723f5b1791b64ccf61d163421f8d3628422dea99604baef6aa8dc2a6294b8053dca7a303fea3e05174ce1f6aaf3c854b5b11e2d312863a9d78d00fde843
- TLSH T1D1317B603FFD0654F3F39E7384BF572185BBB9658E20CA2D0141464C5032A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.