General
- Target DOC-W4A6MY.zip
- Size 582B
- Sample260803-p3wfjsbl6t
- SHA256 21121cbdf673923e3a44e1f58fcc0e074bb191899d4e0e323afe437439527586
- MD5 fae1fa5c3d789f9ff56274b9c090964c
- SHA1 7f5f11fab0c38febc23519dde5f18f257e56cb36
- SHA512 00d5ab36c496626e7b5c871881242f6064025ca48cfbddbf6c9de7cd8059c5685ef0ed74db46bbe43719359e6e015c80fbf4293ba88cc2096a46867f93858198
- TLSH T16BF026DB462C140CDE07C5F3130A7AE9F658C050B68F0FE765E096241D18B692F0A6E8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-W4A6MY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-W4A6MY.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-W4A6MY.lnk
- Size 1KB
- SHA256 ba85a5b82a425c36d9b24e175f591b0ff553978f45164d2264a2bc919f592b67
- MD5 7d7754e727a56fd51f7457453aa0b7f4
- SHA1 071fb89209b1a6a4a20ee94e22072ede8dc0d70c
- SHA512 a5bbe909a0f9a8e91fb9a599d74276d4ef36a7c800dba98ab55b37cb47a5962ba8156ab4e54eb78d1855a703924472781a0437ee0b387c4177b31956d287f59e
- TLSH T1A53176503FF90664F3F78EB784BF5B1089BBB9668E21C61E0141464D1032A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.