General
- Target DOC-H3NTNH.zip
- Size 576B
- Sample260803-p5ldcshg99
- SHA256 99be981f183a70fd394d49d63cd51e79fd0d25773062bfc62cf2afc2b0a7c44d
- MD5 4029d80145a6003fa8015173811dddd4
- SHA1 6004e9b30245e1c6190740a79d644451aa0992de
- SHA512 2a8da20342a0930fd1791d15c44ca6e3a8dd86eeaffce83ddad180e01744d4a6497d31e0ece5fbb0938d3272d1bc07cd93fb991bc02938e08ae764e9b210b472
- TLSH T130F0269FCE09F784DE115971636F2211000151456A1E9FAE5737E84E5CC33DE5BF6910
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-H3NTNH.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-H3NTNH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-H3NTNH.lnk
- Size 1KB
- SHA256 15c8320e6525a4806cbb0fb31ac2cb5653300c066e1adeab3526be2592e64d55
- MD5 c95292b51a77f64bd0603d3720b9f6b1
- SHA1 a79b6b631540f133a911e504b5c5aafbec06d356
- SHA512 f17a70b44ee3e1db957ad807ae1e7fb96e0bd56a874f006783423ad714da402a84a2b2bf0939a7aeb5fc2362f0681c557ac3a59534ee7d19e82895cabfe1a589
- TLSH T113319E503FFD0654F3F7AE7384BB5B10C5BBB8A68E21C61D0151464C1432A14E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.