General
- Target DOC-M64TP5.zip
- Size 580B
- Sample260803-p4gnsazvds
- SHA256 47c3147fc57b3663c8e4dcf65d4e56be0ef0935d9c13942c090c621f68c53206
- MD5 e323437aec3b8dd1365557221e01838c
- SHA1 6a500105fc11458d7f2cb099de78edc5cf85dc48
- SHA512 d1c1b4c9e7669c3405349b19166bf91be29a434d732c697cd466f3560791ddd3536a750db4f78ec20ad77ec563f3918038117d9f702821736e23c7b088faf2e4
- TLSH T1CFF0E1DAA274664DC724A83FA611A940436044D0161EFBBC2A99E9CC541758A8F3125A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M64TP5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M64TP5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-M64TP5.lnk
- Size 1KB
- SHA256 e3329eac07a207041a81e19ac5c21d5eb21e7b883efc32550c83f11277881e8f
- MD5 18ae61fefe43c9f0b7f8b01861500be1
- SHA1 87130196934dbcdb29563a908ddc85364648d3c1
- SHA512 8024059e9368561afd89e99ae7ef6ba89a0510f44d707b4edd8e8bc38b4e060531e1b482ebfe379882cab47e7d209fe602fe428aa37017ee8fdbf25699f16dcb
- TLSH T18C31C6503FF90660F3F3AE7388BB6B1085FBB8AA8E21CA1D0145460C1432A00E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.