General
- Target DOC-FY76O1.zip
- Size 579B
- Sample260803-p4z55aycmf
- SHA256 4656a4283c651e9f537fcab8aabe0140e0baac80fe274e320533d14d9308b7a5
- MD5 3568cee34c8e714d79d5944db4c74ef7
- SHA1 c746ebffe67e7cbef9a2dab700a156698b17cca0
- SHA512 7e248d2c9d392607c47738c1cf94d51752662aeb4f443c19743257ba7855e50b8a616cc0819dafe862d3b2cd466216dfe3fbeaf7c22013c9dfab5de37ecd2507
- TLSH T10CF090C0923F90C8CE21F0FE206021E83EB4C88D8C0EE84F20A0EA8C23C4211ED880E7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FY76O1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-FY76O1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-FY76O1.lnk
- Size 1KB
- SHA256 4783055cdbf70f5ebda5bccdd0d9eef628b4dc150f3a594d03407f39114c3d98
- MD5 f6b83872c360f377caedaebdf47ed807
- SHA1 b50cfb282da69d623fba88679fb8d5ecb6f7624f
- SHA512 61c4b72373e23f9095d4ae09286387cccea72bdda74eff66f5de8cb5db17363512db1614fca946f28b0d658416cee9ee864d724919e42815fe2ec11a53fa4d29
- TLSH T16A317B503FF90614F3F79E7388BB5B1085BFB8568E20C61D0141464C1072A15E17AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.