General
- Target DOC-XZLBYN.zip
- Size 582B
- Sample260803-qa6w9ayeqb
- SHA256 e116be278324b9c25aae444f36d87c23573cd1003405bd5a69ed3ae7f74b9316
- MD5 f7b60550ca41f713629b466817bf0e06
- SHA1 a0f98f35f4859df09a1b3eda2ad04db198481637
- SHA512 a8863ae03323b69a540e1158c9fb07ed31642cbda7d8acdde4bfad8a05258dc19e86896ae7bf2726bc7d4d3e877629165562a72dc623ab24b9c3f8dff2332d93
- TLSH T13EF0E7D5BC0C600DCC42C0713A7D1A1C4475001511B64918D7BCE5DED9671F79D6E4F1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XZLBYN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XZLBYN.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-XZLBYN.lnk
- Size 1KB
- SHA256 a0479d8d8d3e4d193fc33aa78861396a3b81889371aca2a262441003d626b0b2
- MD5 56d1df620b1be142a6fe803ccef51e51
- SHA1 88781dd7b63b83b20909a43790b5b23f1e5cc21e
- SHA512 c7d37c6a6ba52104bc4fddcc97baa1843c80a07f4bd344f1ed7ab5a3dda2fa44fa9eab8161b8254bf4f95677bca4aebc0463e40c5a89da7ecff82b7a25858bec
- TLSH T1F93197103EF90614F3F79F3784BF5B2089BAB9958E25DA1D0040464C5022A04E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.