General
- Target DOC-4HIZV6.zip
- Size 592B
- Sample260803-p8hrmsydpf
- SHA256 23e3c6acf2d7abff014c26aff9948c17f6fe1e96f7584456b79ed318a3e33558
- MD5 7822eb887ac5dbe57c075a641f67ddce
- SHA1 59de88e1c29b52b5f01845d3ad2f81af43944b6b
- SHA512 7284513023e0416161974bbf434d6f56b8db7ae2326851e3625118633ac3efd6aaedf32022c5d953020dd4d0ba73f2581f3235e372a97b53ba5940629814cbbc
- TLSH T1A2F0967312321CE7ED3ED4BA09CB5D334E023C98CD3ED76F21A4C37244898698B50012
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4HIZV6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4HIZV6.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-4HIZV6.lnk
- Size 1KB
- SHA256 60c93f62160935e45661ed4237964ef05ee43e2b95b77cce4a2ad9c6b8b2e8d4
- MD5 9cdc0c902124f432308207fae3404780
- SHA1 c4d9a3cb4e602ad5b937cb431cce633ccab567f9
- SHA512 3857cf913b5b946d25b752d6f922c721214e7f7acfcfc09a0454c4cc10e7caefa10d32590a8d6eeacf339467b384b8f4ad34b1475fb899635b7d11c4f18932bb
- TLSH T13F31CB503FFA0610F3F39E7798BB9B2084BFB8A68E20C62D0044460C1032A15E1BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.