General
- Target DOC-FE2YSY.zip
- Size 588B
- Sample260803-p413esycna
- SHA256 7e7f6c1c57f992c6664e0bb3a65a7250e7b9f8274911ddc6d8ed6ff8b2f3a489
- MD5 f7caecd41df6eda77fbd39a2e6fae705
- SHA1 f516ca05331980aa7a3cbfee6868ca912767b52a
- SHA512 24a0f28ff8d405027c2a4e251b3def1be8e5648ba40a7097ec0d6fe36b8ab6491b9c1026cf576a17da4d9e91edb4ab25455d8fd8e3b774e88d0f8fece0cfac18
- TLSH T121F09683F1C03B1CD73110F241BFB1E99153D825118F67034541C92F4D275046E30C75
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FE2YSY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-FE2YSY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-FE2YSY.lnk
- Size 1KB
- SHA256 6169501989b10960d9e7ad836585481f42d252f39022a644f2be4d5bcf7b0441
- MD5 fa007ecf34c72102e74a8689007ae792
- SHA1 83ceac719f6a5cc865e98cf400cb271723807d4e
- SHA512 18834ba0ab2fc169397347df3ed0db027bc90b64316be15de0245b00fa39c19ffcce5bfac93cad01a151350e1cd2a60f48c9476666a95a8299debb3b0847c21d
- TLSH T155317B507FFD0654F3F78E7789BB572485BBB8558E24C62D0141468D1032A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.