General
- Target DOC-4SCFTO.zip
- Size 576B
- Sample260803-p5geeahg97
- SHA256 b495420b7eae8fc70289d1f7abdb246766b3ee2a9a8da97ea04aba691b83c3df
- MD5 ef0eae2ec1cfb91985500a2f902aab9f
- SHA1 f707ab08afbe0126fd9ee9067ccaedf88c5d3939
- SHA512 348f1c2386339f9c0b19ba4795814ffe95c903151606c1aaef03ac495168d667b361be9509c86a44c4ea6ca696c19a4a9ebd83d3738c7cf233818abbccf6209a
- TLSH T164F0962B3D074D0FD67C33740D7BBAE5180959018441915F00D8D2DE8FB4AD8272253C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4SCFTO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4SCFTO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-4SCFTO.lnk
- Size 1KB
- SHA256 d35c7c34d1ba1c02cf35320f5d201a21c98be2be03078a0821a46a1f3103c919
- MD5 e8fb8bd11b75301ca4edda930c5d7293
- SHA1 1094d72066bdac7e28146f3ee332fa2466dbfc06
- SHA512 7863a8c98558db5e1d559b5acc823f8e0ead0b890ff1ada9b46b377d31d72c6364a836e7a202eeea4e609986bbaa31b269f0256be7e7eea43c3495000cbae210
- TLSH T131319E503FFD0614F3F79E7384BB571089BBB8569E20C61D0141464D1472A14E17BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.