General
- Target DOC-QVRS1O.zip
- Size 579B
- Sample260803-qa8e3syeqf
- SHA256 4bdc610c7629b0b05a7948f4afd605dfac81c9c6977725eba1dff4be026394fb
- MD5 2e87335ca4a718d965f7eadac08a4037
- SHA1 3cc7450b59295e6ea6c20a6c4055ff15e096022d
- SHA512 d234cb3ccc27ffb6994d70cf92fc6488fd11218846c6852c56df072333f2bdea0b33d654eefa354400f7d2d65adea15d16535d796118528be76c8a4307701a71
- TLSH T1DFF026E20091092CEE05D4770497793BDBD2A08C0438EB29D593DC395DF5DE5225667C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QVRS1O.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QVRS1O.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-QVRS1O.lnk
- Size 1KB
- SHA256 dfc5781674922da4db823afbc4f36a7513a1666786d9c2499a69be6173630bf8
- MD5 4489107b43eb50ac8a469cf8c47fbfb7
- SHA1 9df7701d74d86a6997f66f3d12336d2bf2ddabb6
- SHA512 23f12b0a6221bcb1fa03540cd64ab394c34c83244ed4ec6061bda34b93af5926243930b5ee3bbbc71b3fc6bc869d86789956f708a60fade104043e18a369a734
- TLSH T186317B503FF90654F3F79EB384BB572089BBF8658E61C61E0151464C1432B14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.