General
- Target DOC-XB1WAD.zip
- Size 586B
- Sample260803-qa36cshh95
- SHA256 747e894ca4510efcf88449ae249fe955c15ad755af5c4a2cc864454f5b1b0e01
- MD5 2164351d58dacad4805c714eb42c76f9
- SHA1 22240f752f8669eec2eca3fa2d3418edcf9bf089
- SHA512 23760648ef52f970094eba750c0c42718c2b6f24469a4516eecfb7d4aecdabfa536ac1e82d7fac9c59e30afb804cc7da0520612c23c15222a5e9df50db480ff7
- TLSH T163F096EA071D3011E000E439942230B9A89218E5CA8F314F2BD6E80609CD048F7D7C43
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XB1WAD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XB1WAD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-XB1WAD.lnk
- Size 1KB
- SHA256 742bf935e698d627c9c69624baa2f4a6007727a397e6e466cf3e08d27f8ea21d
- MD5 4aa70dae03431be5dc1396c336a1d890
- SHA1 41acdac40d7cf6a70f24de21d397be2b0c2bd710
- SHA512 3e6a03d4ded3decb46d33dfea16542cb59d193c3fddd17230bb7592543f881e5d87e6fcff8acdf9829ccd3e04c707d7adb1e8d471961c087df6692eae5ef6bff
- TLSH T10B3197103EFD0A10F3F39E3398BB9B1089BBB9568E60CA1E0140464D1032A01E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.