General
- Target DOC-AIXL28.zip
- Size 581B
- Sample260803-p8ysvsydrf
- SHA256 a2d9858b2be66261a9cec0c16c0fe06e0445367d8702bdee495b44b28fac6cc5
- MD5 d77ad5439bbc67094b1590080cd4378c
- SHA1 3fb6d3e090602e1e0b3a6d6727fd1a02242e56a6
- SHA512 b892edec8aa31351841a357c9526076c564018e11e6e0f62e02eef856ec0d2cc71107a4631f8b7f18baf6e0d5b6c4a707ea5ea2e18b221c18e801e64a4b20b68
- TLSH T1D0F026D3401E9AB5EE09C9B826F7A500E584DDD1C7851F432601F50ECC063090BDD7CE
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-AIXL28.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-AIXL28.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-AIXL28.lnk
- Size 1KB
- SHA256 8709b510fb259da8cc5c0dd6e8a76972a5ff0ba51075ef5703f0562b6a617882
- MD5 7a8b9e1f305f8b446f7ecd8cd7a0e200
- SHA1 4b43c2126c0b3c0f4b9eb2c750871a0d102c8ca1
- SHA512 b9dd0a4038b4798cde59221f071fb8582dedacfe709b69d1b6f8e1a3fceb603625ef917afeffe8553e67e4f6215a0fb6de023be9217c00676523cf1c0f949182
- TLSH T16D31CB103FF90610F3F39F7788BB5B1084BBB9568E20C61D0140464C1032A10E17AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.