General
- Target DOC-62S8O0.zip
- Size 583B
- Sample260803-p96j4abn2v
- SHA256 3eb0cd91756148f9217059c1df474a97e20c62c6a47de42c0aa6d67298708440
- MD5 b4fcc10a37fc31bde6080e7db335e043
- SHA1 dd881b88e7ec48806c10b2af641f3b08fd845c2e
- SHA512 7fc710a0d0ee51246aa5ac6669401aba526adbc2c26f0459090811f4e2598e8ea7bdbf858176b0caa70c3299ddae8705c03e61f6b3290c115cad61797d7db4ac
- TLSH T1A8F0E1692022A874C329E4BB65AE1159D90400961C4797F538ECF98BBCA85652D9A8B0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-62S8O0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-62S8O0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-62S8O0.lnk
- Size 1KB
- SHA256 a8fa7d878f29bec0d58ba4d9b8268246e4d1c9cf7b0547db6f33706b65b5cda9
- MD5 c8bfa56cc06090e6548c050833307985
- SHA1 9ad4d2a0100b883cb4a909a99bfdaed2d6c8c838
- SHA512 a1de4669cc158ce50c0a6c4696eeacd3e23c835f23b0a7c7a63a4c83b107a3d565a857aa32dff759f48ec9553a6fa03def394e1f00cf9d75323d4237528c5e9e
- TLSH T111317B503FF90654F3F79E7784BB571085BBB8A59E20C61D4141464C1432A15E1BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.