General
- Target DOC-G8L4IY.zip
- Size 579B
- Sample260803-p9c8jsyeka
- SHA256 24069f3edc8070a1145cb4ced32182e08ec1e2741a4e66b1f289f6fc724b8e2b
- MD5 5c30c802808b8553c24466f11a99f887
- SHA1 333b78c7c276a090d2af1051a55d61b892c0cc08
- SHA512 ae06087b2faa2a08f263173294bf7ca8e18e6319766ca03d6f288f8b6f1108c3d447f34cd4550b7c1809bf6841dee884bf76c06394d2eed6d3de415f89586480
- TLSH T11DF0269719154018F1FF99F740027269CA1E83554816955EF071E0C80CB21602E9DCA3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G8L4IY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-G8L4IY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-G8L4IY.lnk
- Size 1KB
- SHA256 45951c43be7acb52fe07fe59a5d7f091c5e517c7f995ec1b568906a70baf461b
- MD5 5ba40b1acdad53255ce6c9a1c03d2fe0
- SHA1 ba6bc789bcb9745eeaed5cf6d5a9a9066af7fd4f
- SHA512 1bd5caa314fe0bb185260924c0c682f088897242a53ecf4815fde84daa221fc95406adbf58f171fca11e57e617310f7e9259593a60a0eb331a378acfd0dd47a0
- TLSH T15C3142502EFD0664F3B78E7784BB971489BAB8968E20CA1E0141464C1432B14E2BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.