General
- Target DOC-EVJS96.zip
- Size 582B
- Sample260803-p82jraydrh
- SHA256 2e253ee5a20373956317ae5fff58ffa905913e795c2a3fc3d25761bad68e38ca
- MD5 480ec5e8e2a2321a11de3e69c99018f5
- SHA1 ef2b26e8541cb461fe0d75d7d12a30b29e743a44
- SHA512 c479f5f4af057a4640443b7eeace3efb76a60628ece0700e7d4d48be0f397b7ea180493140a05551469467ce4316f832879392da77fc09da4291a5130efa4ee7
- TLSH T1E2F0E1B54803476DC38B833454625965C3A025315A5F0EEE7A49E56F1636168DE0F476
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EVJS96.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-EVJS96.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-EVJS96.lnk
- Size 1KB
- SHA256 4ec26f318fcaa67454a894b494466a2ae7ef5f83a4164e2d4e3274f7d6f02812
- MD5 a70fca84bea128d52f4387022443684d
- SHA1 fbabcda83f3adfd807df44c49d3a715887c1ba27
- SHA512 5bd4bc04d714acd57f602553f9cab9aef50d59406d51943c60d265a9d1320f3fa64c6aab8079326559f3dd01c60e7047da1775d654a32affc1aa996d7c6964b3
- TLSH T1E13142503FF90664F3B79EB784BB5B1089BBB9668E20C61D01414A4C5032A14E57BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.