General
- Target DOC-KOTD1J.zip
- Size 574B
- Sample260803-p85amsyejb
- SHA256 3be483e8b17875d750c9a1ef86e429180233b8cb076227c6873b427f3214da67
- MD5 685f730e041fe8d222079cc8d1ce2667
- SHA1 ed997ab7e456af3cb9b77f60df3690962d3759ab
- SHA512 9a31d9907608666e5707fd8aeae0b27cdcb911d36e37ff1d93b82edafe11a3085f2a462be3287571660820deefd7e5baec1c7dcfacbccd032bde13a1daa00a05
- TLSH T1CBF096A36812C00BC390A9B95BAFA3052C1D8394684E9766B33CD0D708C0F90CD9E749
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KOTD1J.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-KOTD1J.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-KOTD1J.lnk
- Size 1KB
- SHA256 ff4b7e5f99286f6ec3e65b5c6e1dbcd4ac9088b13f9078861d97dfa2d6d559cd
- MD5 0498d83c9254bb7aca47f7e20ab281ad
- SHA1 bba15f1350bc785ff3c4efa738a78c40dc02a12b
- SHA512 7fd196df420226f9143443f8b6bcab592fcbf7d5fa2d28feb80fd649606667aaf3ba7e8fdfb61a40fd2fa2bde2f388b291283b68b98d9360efd8a849add39e32
- TLSH T11F3176503FFD0624F3F78F7385BB5B1085BBB9A69E20CA2D01414A4C1032A14E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.