General
- Target DOC-VB0VRD.zip
- Size 578B
- Sample260803-p45qlsycpe
- SHA256 1718481f54d36c4e50f4a5c435b1f6521c91b9415aa95bac01fa68c9702fdff9
- MD5 5a0d08fe85c8bdd875cd9e543a3e5a55
- SHA1 70aad21a42d1239c99227f016fc2cae072e34edb
- SHA512 cfb211b938fb2dd8a8422e7bb4c1843b36adb0b24beaeb1b71b807d6880332564aa00321b9aa0c0e5d80bbe29c70a2cfce6efb64455a4d031ca2ffa95706287c
- TLSH T1BAF026B6850C09C9C8CCA9FB1809173BD2DE458D071469D41B90F40C3DA1C6A3B5932E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VB0VRD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VB0VRD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-VB0VRD.lnk
- Size 1KB
- SHA256 f88617b8e968447524faa680e5bbeb46a086e2371403093ec9700c6b8ccc4d3a
- MD5 ba1e8d6756e91cbf61a2c633703a4cea
- SHA1 f7bf0d02a56712ce0632718ef87a78960cd4feb6
- SHA512 48d732351fe75b5decaa365bdc4a5db810e16ac8f1c3472b54d248faed722c5197c092f5c605c4de5c3b587e38bb2b91b2eaedbad4a0fded545491cc6b12525b
- TLSH T14E317B503FF90654F3F38E7384BB572089BBB8A59E20C61D41454A4C1032A14E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.