General
- Target DOC-YU45RI.zip
- Size 582B
- Sample260803-p3v5sabl6s
- SHA256 b17ad0898215d16f6dd11a8346e18611c439cb081af06e6033a03c6e3b928b25
- MD5 b9830a5e3e30147e5f76766539bca542
- SHA1 78a113f582001d86ca76f7514b0be749f2b502c3
- SHA512 50f2e553d062c7ca6b0e0881409d504a360523d3143ad30c8a62a7f95b0fdeb7f52592d669441cbf889e0dc07c89a260146d2f942e9d5f825da983e629fc5657
- TLSH T1E0F090F34324C0E3D20A0CF74C321B3DEA548A6E2B3A40628920ED3AA9314B87CBC081
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YU45RI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YU45RI.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-YU45RI.lnk
- Size 1KB
- SHA256 aaa23a4da720fd0d6e2fecf2c2f3a20d1e326df43a835e7498eae4bcddeb9869
- MD5 a2610110349dc27bbf97812c5f9fbffd
- SHA1 411043032f695e6b3b736bd727aa5a54b8af9fd3
- SHA512 cf3e5b7280ce1b421d02a735b7f7e674151b2a81372f00260612d45fe7968ae452917b8d94128b9297fec1c8189e7cb8d6ed3adaea62f45ebfc6b938c2018456
- TLSH T1013197002FFD0650F3F38E7385BB5B1084BEB9A58E20C61E0040460D1033A10E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.