General
- Target DOC-325VM7.zip
- Size 551B
- Sample260803-p4q78abl91
- SHA256 bf4fa1ffdc2d82dc725845df918f942c093d0aebeb82a1682f07ee5016caacfb
- MD5 468964aaff73aa864942b0e02a110834
- SHA1 aeaeedab0549df84a737160d8f101465efb4322a
- SHA512 5b5d1f8fb5ff3aec250f779753df113c0401cfb44397d1ab1f63e4c4300cb1223281884cca2e98e0f89fe1dd99da76a018c0e89a9591a42902e9d35ca8445b68
- TLSH T1A2F08B67D05A4C43D65180F698A376860B6FA40904062F0A1A19AC831D2DE167CBE5A5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-325VM7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-325VM7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-325VM7.lnk
- Size 1KB
- SHA256 d05c3c644889fc73df7ffaacc3ed7c19d23a5ebef8b871ea1b7ef9433e59ddbc
- MD5 f85d4d6bb5b7a66350d0eebaf399e8f6
- SHA1 9c4482bd065189381061c7b292b06051d5b19b1b
- SHA512 42590046a9569e077eb3b5da40a5f34fa937f0a33c8d6f7696f5728e43cf9927d3f900dd45390f3591eca7a71d3d93dcaa2c9ecb050db8fe69a796e4f644ce7e
- TLSH T1143121143EFA0624F3B79E735477AB1489BBB85A8E118A1E418546481472A14E07AFB7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.