General
- Target DOC-BGYNO1.zip
- Size 581B
- Sample260803-p45evaycpb
- SHA256 d93fe6b6af0c51a0874dbfe2f96e1722e3288734bcf1d706af7a73daa8e22506
- MD5 6ea9b494bc072123321ba6a1f2c799c5
- SHA1 0bfb5bfae8a8e42ef2fe05601793266141f200b6
- SHA512 231b5121bd8bd62c7c67e154c40d28300edf1eb7fd7691b0d4532373cc6da4b5a80c24243560b75d4798da35a14d4fbdb2dd2b6ac496b3c380175bafd0f3adef
- TLSH T116F0415B6172508DE58200F438321A150B0D61C385071D0B5ACEC1A7003008BCA4B09A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BGYNO1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BGYNO1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-BGYNO1.lnk
- Size 1KB
- SHA256 766020a6d5af8ccda152d50c4775140618c8033aaacd2600d87b759424cacf88
- MD5 edce2f8ded20f87b76be40c020838b36
- SHA1 959ea77337c6f5169602f14f55a3e878cb45d8f4
- SHA512 c075eebbc8e8ed1429a45998d51c76d40e1587bb2cd0e0fb68c3e1683230516730cafcfb910e8bf4839b9ba8a1a4f227c1e5c861411e59b0a3f2279763fe748f
- TLSH T17E3147503FFD0614F3B38E7394BB671085FBB8699E25C61D01414A4C5022A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.