General
- Target DOC-Z35SFV.zip
- Size 576B
- Sample260803-p49dsszvdy
- SHA256 e453ca7e59becd58a2a7f67e5b1505902b8710a794c1226a5425663bbdd23ae5
- MD5 6e84eae14f96f19d870b2cd73af19fe6
- SHA1 f737b9bde553425766511a037a3e69c92a0faf53
- SHA512 7286ed62f71b7d62f54d2184b863acf5d7d4af637f53a2a6c4221ae8ea7a58481dfefe80c5d6185d05c4507d38e6a849b2e07e8971ee9eef9a7a75344ed8108b
- TLSH T120F0EB664EEFE50DD40202B8A19134BA93712118CE4E138CA838E8DE5E940B92552625
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Z35SFV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Z35SFV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-Z35SFV.lnk
- Size 1KB
- SHA256 cfbaca8849433957b269c04dc4163ee88a00bbfd87d7f3a4db7eb65c482e0f1a
- MD5 5016eed75ce4779ba73f3a42bc0bc0af
- SHA1 48bc4031499115b2ec2e5dffd9b03ff03404c9f0
- SHA512 1c9918e73f3459460c2d3242f6ab971a39b259200025dbedb12168c3e52c5a9a8df0558fc7d38d7dbda8ff9c506ef4321d22b3201eb3efe883e8869547797691
- TLSH T1913147503FF90654F3F39E7384BB571085BAB8658E20C61D0141464C1032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.