General
- Target DOC-AEDHWT.zip
- Size 582B
- Sample260803-p4b4ashg76
- SHA256 89e38723f7e635eb60b84b40ed30413e62729af2a735881e078ea80c5ae6e149
- MD5 bbdde48d8f7e0e90c9d861de8cd92250
- SHA1 fde72a472baa2132c84aab5a8ce648253f71896b
- SHA512 d727253331702608d7953b19454d599bb05b6c8668dc5a4bddc3906c036163d833882aca906c1acaa5bc8720cdebd19405203692b83f8a824d6bded234eba451
- TLSH T18BF0269787EA4451C713D2F02C37796DD229609387446D09BC779657256D100FF8F8F1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-AEDHWT.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-AEDHWT.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-AEDHWT.lnk
- Size 1KB
- SHA256 8348aa6031edcc6da35adcbe175866dcc2650802130a8396edf1502518613e79
- MD5 bf309c8ff3866edc02f810e7e90943b8
- SHA1 d69152455175dc5694ba3ede235dacbe6571979d
- SHA512 4c9ed144c6688bfcbceced4899db7e772a53ffc75ce3e4c8969148bffa9adddbb20179124da7b83faa6d58092d7fdd61907b8b29c3c21dcaf384e8b048fc2d3f
- TLSH T1A631CB003FF90658F3F38F7384BB6B1084BBF96A8E24C61D0041464C2032A01E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.