General
- Target DOC-FWWYA7.zip
- Size 551B
- Sample260803-p4f29azvc1
- SHA256 a408a9023f29aedd243181a86873a9aa4c500c44895a10ab59576f2410c13476
- MD5 992666f795c047debbc4e2bf54ce96a9
- SHA1 5ef2743306e78e3e0a9d69f3fb99b6c858c5e81e
- SHA512 f216185c3b0a152a0026e25817659de7642e180c5e28ccdfce0928c948dc37d8f7b927c3e50a5db45cbdaf20e6eddcb052ddab25f25ae4c0bc9562adc91ab0e4
- TLSH T18EF0C06BE09A4C13D60191F698E336460F2BA40C04061F0A1D2D98C31D2DA57BCBFAF1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FWWYA7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-FWWYA7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-FWWYA7.lnk
- Size 1KB
- SHA256 d05c3c644889fc73df7ffaacc3ed7c19d23a5ebef8b871ea1b7ef9433e59ddbc
- MD5 f85d4d6bb5b7a66350d0eebaf399e8f6
- SHA1 9c4482bd065189381061c7b292b06051d5b19b1b
- SHA512 42590046a9569e077eb3b5da40a5f34fa937f0a33c8d6f7696f5728e43cf9927d3f900dd45390f3591eca7a71d3d93dcaa2c9ecb050db8fe69a796e4f644ce7e
- TLSH T1143121143EFA0624F3B79E735477AB1489BBB85A8E118A1E418546481472A14E07AFB7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.