General
- Target DOC-YFU86U.zip
- Size 582B
- Sample260803-p343pabl7w
- SHA256 dcd00ad7a98dccab6529e6f51d999e008ecdddbe681a94923739a88e0ff0118b
- MD5 4c51ade2e3f5db72b0983f62658cc618
- SHA1 616466a7442334cb5946a86f764692326a16535e
- SHA512 d8ec84c573264f0975c32a19e8e934bb4b415528e22c58ba91da0b31103f727479eeb70014fcbd00d0bb4e3f4621163e0c0fcc867775da36758106d3632c01b7
- TLSH T1C0F0E18BA31CCE04D10184F2293A61DA139860C7A413562A1415FD4D5CDA19A8D5E079
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YFU86U.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YFU86U.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-YFU86U.lnk
- Size 1KB
- SHA256 e164f1ef7d4145d31de1f38b061ea7e33091aa96a75e465397779ba9db062981
- MD5 affa42c68425deed6e5d5c1ebf216ebc
- SHA1 eff721dcea30e55e79ec8ef4ea3c3c1b60e0bf6e
- SHA512 6af4980c9b240fd09ff8529998e3cc0cc296be0f95a8eac4313e1f640f2926bec48c65f153c261d3e16413b3f29122fedeac8fc241b12cd571e82a22e947ff9c
- TLSH T1993197102EFA0614F3F38F7784BB571088BAB8A68E24D62E0041460C1032A00E17BFBB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.