General
- Target DOC-X271ST.zip
- Size 588B
- Sample260803-qa36cshh96
- SHA256 10cd0ebd73431d53a3f45719e71719794e81289a0ea9960f6ea74949d60bddde
- MD5 5c164f9965a8dc40aa4c12a005c0bc87
- SHA1 3f29884ebd83cab1625088ede176ea8d92911dc4
- SHA512 9f18a22e19ecc4db484d45a2af390d18a444a0fcac265a40541404f9012e2a1c5cf5a8ea7fd4c151f09dfda52f46af8ebbf66ddc4148f578441e725ab83dd173
- TLSH T1EAF04193C158099BC1CA883831F9440B8805D981060AEF1076FCDAAAF4D2A078A8F5A0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-X271ST.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-X271ST.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-X271ST.lnk
- Size 1KB
- SHA256 68b26768ba5b59e045c51ee8ba488b834cae17b9a775cfe802ca1f033160fea6
- MD5 6e8be7ec9a639a7ea10495c0edc2e71f
- SHA1 dd7f19e1fd968c19e4c50b907b913c2b027a1d17
- SHA512 b2a8cc650f8c090da5a07a745da9554a7c8bc9565d585b2cae61eb10e9c8bebb3a2a621ca9b40903649b5ae2bce052c6136d7b612717ae08e067093854032ccc
- TLSH T1813164003BFD0620F3B38E3695BB5B2084BFB85A8E20862E0050460D1022A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.