General
- Target DOC-36JEXD.zip
- Size 586B
- Sample260803-qa2brshh88
- SHA256 b51a637cda7edc3e4711a13497f267fdf21fdeff8205692b3745f002a7c935cf
- MD5 54234c9cf493738ab210d24151b0514d
- SHA1 b5ecbcb8d92bfb30dada16dbb21882df39b748c5
- SHA512 84a9acddab5f71899643186ae2d0ceae73e2b8e7208622b9803c0803fe5103d5a165dd55e1c849a3065b40079b2320dd569adf44e7edca38017350c41d1b0d5d
- TLSH T1D4F0E1E7D5579400CF23C27C286A1056076ED179294F9E52F161D45B8C4E8C1E7135A0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-36JEXD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-36JEXD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-36JEXD.lnk
- Size 1KB
- SHA256 e4058ee0bd033a410aa514fea2d95126f1df14f19f9264ab38cfcf06b2ff6099
- MD5 61904fad440c0ed650e8971a2b5b39d1
- SHA1 8b6a5a11fb037a638e672b7bfc9b31109b8e9b56
- SHA512 cf7a4585239f70c6e51c97ee52c1428643df42f4927660d7d0346de987bc5bf327bb48b8369aa142d5c07828e275ee0d14c4046fde5e03cf939fe4e8f4a9f8f3
- TLSH T1A731FE103FFD0628F3F39E7384BB5B1088FBB9A68E21C61D0040460C5432A18E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.