General
- Target DOC-QRK0BD.zip
- Size 585B
- Sample260803-p4ngbsbl9v
- SHA256 11fce5e64b295e9d1deefd3e671f71b0ade1b9e61676cff218d006383f7dfc23
- MD5 a60d030643510af5bd063977124a5a5f
- SHA1 e9141f72a95179b162552c696b7f1e4e9d7f5a5e
- SHA512 121fe384aece5a807a3a5ff1a1449211bdcc9a14e2a8acb4dd4a43024f2704ff5252f199deb55c2b2cf72c2f2bb39ef77a9ac8786571f14b04d6d029b34dd337
- TLSH T163F0E17395C184A5F951ED39A41B024A1E794008015515895998D8F44BE57C87F98354
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QRK0BD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QRK0BD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-QRK0BD.lnk
- Size 1KB
- SHA256 11174a82df2af54b61718bcd2f2f439dcdd271ff7ba50c6770895f5f0d3c63d2
- MD5 43e0ec5cf57ad0f5f19b3e5a1aa8f555
- SHA1 08f24b0b2971056beb0d48b6ecdef144be287b05
- SHA512 61fea399bbbd37ba20069d310c073f35f840b91489225ec2732fb0f0d308a0f11b0a49d6bcf2e807c37c75a4205ebebfcb59b6fbc74725e29d0f381987f4ca3b
- TLSH T1933197003FF90620F3F38E3784BB5B1084BBB8958E20C61D0041464C1462A01E57BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.