General
- Target DOC-Q4UJ54.zip
- Size 580B
- Sample260803-p85amsyeja
- SHA256 ec42caf88ae044c747c8901665c8bbdf4dd1003e40ab0a615e278834e2914933
- MD5 dd10c524861faa36eea23763cb560563
- SHA1 2a26978c1a979d5068314975a5389084c0029144
- SHA512 f1351aa84a2d5dce7fe99a989e5eced830e9357181c6c4e8c8167161769c30ee0aefaeef3121ae57d728ccf4a919a352e9a4fc858ee09b00a4d253ce9ffd7609
- TLSH T16DF041A18974D185C1020E7514221A3802A50EF6803B5A2B323EDD4298FE9A8DF7D662
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Q4UJ54.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Q4UJ54.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-Q4UJ54.lnk
- Size 1KB
- SHA256 f3c0f01cfb73f9d76d5b0acc99b072585433b0f6aa15091fb2e361f84455cefb
- MD5 a10e792385776785cb8d51847722ab1c
- SHA1 6f286433f9d8f13318019c77cf0d3c96d7b627b9
- SHA512 78529966d5c0572bcfb5e4272dbe577bc3d60f00ee08f76cfaa403390fcc884f56f2accf2459882934ddc81f2b455340f48d3f142517754fb713746e5dda2307
- TLSH T1A3317B503FFD0614F3F78E7784BB571089BBB85A8E20C61D0141464C1032A14E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.