General
- Target DOC-ZQCILT.zip
- Size 576B
- Sample260803-p9asesyejg
- SHA256 d20b4209667f765e57d3eb52adf0c4a77d792948784b8ada6b17efd6cac3b6f2
- MD5 0ea23b1014acffedd70ca28ed750775e
- SHA1 9faf466c1e69a2daaac1059074121172fd61b91c
- SHA512 a54936b08932db36863972cfc8fa115d30333ff6f293029de309cf309a321b52c9e218ed0f43917469531f016e6e5c2a95b60fc9e163131d80f558f3002dfc2f
- TLSH T16FF026BA0D2B5200C593703C30F9317141E0244B661B0B3A85FBE55508616B02D8EEF6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZQCILT.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZQCILT.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-ZQCILT.lnk
- Size 1KB
- SHA256 ca4cda9244cb62c99c5316c66312237a429bad731daa9f1807950a80341d0f41
- MD5 ecbc31859d3fff932f91ec3028c96432
- SHA1 de90acf00905c9c59156bb93692a3eaa03292ed9
- SHA512 1c3829b01828715bc4a8ac4ce6d8b8252fdc8ca8caa6e52b762a357d75a221fde0592d3e1c1fff894db5d75d08e8c833855e5c26d55b0964a284d46db48db48d
- TLSH T1B1317B503FF90614F3F78E7384BB5B1085BFB9558E20C61D0141464C1072A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.