General
- Target DOC-K28QY7.zip
- Size 589B
- Sample260803-p5ldcszvhs
- SHA256 10f0d2ae5207c0291ee089031b75f8929737c6abdd17db283bb83fceb2cc5474
- MD5 86df2426674e3a7c4184fc2f3e5efaaf
- SHA1 6de8f1b14ec8cb8e3a765d6aa6396215fd82920b
- SHA512 cae99b6cd86e170f1f0e17d687c92e44fd0e437f78c653362dae675e4163e4502f563abb78f97c85ade7205298607d94a1fc10573edd948630deb0434b582179
- TLSH T120F026DAC83AEA00C1AAAC7F14511F462B1364DE071F1F47590CC5D9456135D27ED457
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-K28QY7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-K28QY7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-K28QY7.lnk
- Size 1KB
- SHA256 8f82f6f9651da9b98fd6ee6ab62f84d34081c175e5a31e013d40a68b4ed1f6f9
- MD5 cfcdc6e98df8c6da2219be3c65505876
- SHA1 da0e06f63d3d931abeb1a4ecd83ce47a196f91e8
- SHA512 0baeb902c5cf307d5bffcd3c21437a0a5cee0c348db283c818d533808b350c037e57a172478f4a6d3508075a93da59b7bc84775bf675b7cb027a252df1169115
- TLSH T17A3197503EFD0620F3F39E7389BB9B1084BAB8568E20CA2D0181460C1422A05E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.