General
- Target DOC-48WVV7.zip
- Size 580B
- Sample260803-qa75bayeqe
- SHA256 6c14aecf3fe4acceb09e04c5942fc09bf8db27f08f5d4de323bcbd9e2c509310
- MD5 f303b294e5973bc3bf4768909d66b40e
- SHA1 2722f139dc4ef58167bf38705a172e28ee81a0d7
- SHA512 a7b8623fffb4e30bfaaefd3f219c74050000a4c399afa4a28ac399f9fe2ccad5795f0c299f4b02ba011d16f159a542616a55d633504317bf04bb886c69b09690
- TLSH T108F0E17BD284D708DA1B04BD90A23C5693501C758D2B56A90829CD8CFD886AD1FDF0E2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-48WVV7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-48WVV7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-48WVV7.lnk
- Size 1KB
- SHA256 a2d169f1f0ef3712821c595e0161ed25da9639fe68d4843924fffacf4dd596e0
- MD5 ec51fe34c80a280a158cb3a22e63c575
- SHA1 6dbe339b78fbcd699f3b400e36bf87979ac08e8a
- SHA512 a2cd2ded7c8cd7d6d3bfbfd56bddcffa299d728653d9129afa9c7ab45897c06813789fa8a028f74fc78e4c97be1786568acca53777a3c75cf2b95555966e481c
- TLSH T1F93147502EFD0654F3B38F7384BB572099BAB8568E20CA2D0141464C1032A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.