General
- Target DOC-J4IOYB.zip
- Size 581B
- Sample260803-p4ppdsbl9x
- SHA256 45fc78dac31b0fa674ee0c8d8f5fb0818bd50b44cd338a087fd7b29fa3d13ce8
- MD5 e22bb37fdd0bde86a0abf3f548c199ea
- SHA1 d450b0b6a3023ff8606c9cca391e7693d0c37465
- SHA512 26bb412de40fe20409317d79baa2f823a38e699d00118ac2f37db719744a1fdd5f3eb593cd0ea42b0b60f84480b0a94b36bf56f1950843184fce342acb584b9f
- TLSH T136F096C387038304CF6A41FAF03199CB4353BE90E71705155009F48DE8656928FCE4C3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-J4IOYB.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-J4IOYB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-J4IOYB.lnk
- Size 1KB
- SHA256 6c08fe3c54172dfd363752b86e5ed824e70ffaf0a129ee093b218f6ac148bf12
- MD5 515cdbf915a99dbd741d4672e67f4124
- SHA1 e72fc9fde8faf2250bcf8ff35db01ec9a96adcda
- SHA512 4004793e9a698a7cabe6a9b14a12c0cd7eb0f5be77d5ff54d9927874c446a5b4f1479d96cda23ed24e41f3046d4ce2a076ba9b58aa50a9244070e50685fe334f
- TLSH T1D13176503FFD0A24F3F79E7784BB5B1089BBB8669E21C61E0141464D1032A15E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.