General
- Target DOC-OT876X.zip
- Size 580B
- Sample260803-p452daycpf
- SHA256 c4ef6e00d2947f0f3db42478d35aaa8ea26cfdcab7c12bac158952810032c1a4
- MD5 ae2fefa91d1e10b8bf759783cb6c8372
- SHA1 d692d1d0e24cfa05c05997b6fad21d6c2394c1b9
- SHA512 74b3403ace82777ee699a8386b3f161c65fe6bf13e69eb923a5aaf99faec394395a3fc3d5e49e8963bde20d489adcf6e941b060a1d64c3659fbb940a9bcc1cd7
- TLSH T1F8F0E1E156DDD512D0374AB67215632F81BFA11266430D850749A31E16A85D2649AAF0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OT876X.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OT876X.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-OT876X.lnk
- Size 1KB
- SHA256 391c95689c9a7c95ad8863785951b3c9b2ddc7f5416066766711ec8c607de965
- MD5 43a5d6441103d0d78a27b37d7be86e8c
- SHA1 70c36b005eb3831ce6217cf2b41a08548848ae5e
- SHA512 c6be67f63611162770549ebda8332edd2b9845524da2668159c408b7b760c5284192563df409e3669099ef22801470856f9f4c66b0c63ddb698a2dbbf045eb2a
- TLSH T1193147502FFD0614F3B38E7784BB672085BBB9558E24C61D01454A4C1022A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.