General
- Target DOC-TPRQHG.zip
- Size 581B
- Sample260803-p3vt1szthy
- SHA256 49e0fabb0bc9214f7f41001669e532eb9a06f9ed8745d2fe02eacf8cb01f02e0
- MD5 f6a74a4daab471de4b818e581be2c928
- SHA1 c9226ed171e0e3ef76d92c089bf16d4a1a0abafb
- SHA512 8329882d4f9c0f53377a685aac767ef8038de18ed6aa14e40114b4cde9aea076690b7aa382ec108cfc388b0a658b4ed719350857d40b61e779143f846396a67b
- TLSH T1EBF026A1CB751C00E406967979E4194DA3000849715017E317FBFC161CB451C8D698A2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TPRQHG.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-TPRQHG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-TPRQHG.lnk
- Size 1KB
- SHA256 0a0033a75c652d6443ee5ba28056a991ad048b467292268ef2a9251898e2a3c0
- MD5 3e1adef1d5df72690c46bab451bc4fe9
- SHA1 7777fb5443e89a862bbce877f0b8f67a6cd03b7a
- SHA512 e987cc08ed3ae85dbf7a84bae6111ab4e9bbef1a2c89d4c434c2b63c0ee090fbf18c277b205191094a570ae29cc77aaa3c251fabb5d964f023c6e81b0c123c5f
- TLSH T17D3142503EFA0664F3B38E7785BB571089BBB8968E20CA2E0151864C5023A14E57BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.