General
- Target DOC-65RA0Q.zip
- Size 577B
- Sample260803-p45qlsycpc
- SHA256 29e7d12674c54bf25cb8c9aa12f07e032b210ff089c2710c17c97c3313ce7396
- MD5 de37fb728e2f01d0b7a5ef130da6c688
- SHA1 655db5eebdfc538fb58cc97113db3f5314120ba3
- SHA512 5ab2c26c5a959fec5e7db2245abc284cdf2c838a0f00cac37ffe8d3a926594d16647a0a412775f4906393040a9dd2b5f366ff821fc4b0b1c452207b478fe0102
- TLSH T1C4F0EBF7C020230DD12D1DB8BA2720781F6A2096052DE7229ED4CAF6AFE0C5129DD863
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-65RA0Q.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-65RA0Q.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-65RA0Q.lnk
- Size 1KB
- SHA256 d9976540d566adabcc54fe30b6593349c4dfca18e4827ce664da6ee6efbd6905
- MD5 548d46583ba5b88e5e0ee1e7284ebd81
- SHA1 0b2eab43b603a0d796b7dbf28e117ec79c4da3c9
- SHA512 21544f841b3b3ea9b29408f765adc7663f584c4f2ff12cf006bd3bff3188007364991c3e4dba0328d564d59c7dbf43bc23407c4a6ee56b3c63a95ad7673e06da
- TLSH T12931FE003FFD0A18F3F79E7384BB5B1484BFB8558E20C61D4041460D1032A08E27AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.