General
- Target DOC-0D9L8K.zip
- Size 584B
- Sample260803-p9m3rayela
- SHA256 eb0e7f7fc00e2a3c519974fea33dc423321f1080eb8f902a0a7ce5ba6835f977
- MD5 5f11981fe54b3923d0e249b284a8c8a6
- SHA1 f60c73fb2a2ac90046a525d8e54da489b9263ddc
- SHA512 b0d3b2cf03b1a9dadb23c551c2239935a67a3b5cde27d4500f824658a93e75bf54e1b38f47d49333c97af078e9f3761c47e479933ee7f255b10696beb150f0e5
- TLSH T15DF02663E6350914EE83E9FDBB2190215745A158A58F9BC3F611FC9F8CEDB867D88070
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0D9L8K.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0D9L8K.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-0D9L8K.lnk
- Size 1KB
- SHA256 44c967c74145ab0cba705dc7dee65c238c00e93c1d403db187dd8bfd7949ad8a
- MD5 ae16cc1f9fae279e6803fb043dd891bf
- SHA1 85fdb9feff60ac34781a1dca3196fc04c93fb07c
- SHA512 a82fd7818bce04cc83bf150534afdc62f7ce8327bb92ad831fb32daa257f315074e5e70ddec4c1819c706d8da6058c887b32c51daaf0a40c02436b8173b55f48
- TLSH T1473147503EF90614F3B39E7384BB571485BBFC968E24CA1E0241464D5032A14E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.