General
- Target DOC-S9ZP31.zip
- Size 580B
- Sample260803-qa9m5syera
- SHA256 d92a470a534cd4a80cb7f1f24b922c0c78a073c8b392908ba615a2ac3722d7cf
- MD5 a85d3bc94a494f0cda402d402c663897
- SHA1 75aaa1424afdf49cd075cdecbd0eaa46be5e0b3e
- SHA512 26931d2fad2eec8aecf2b0808cb22316e3a6821d726aef9fc7b0bcbf14034c94845ad3dc89ebc030054f1beadb82186a58ca38876218db4521b1b5bd4420646e
- TLSH T111F0E1B3A71A9244C24AC675D53E460A1200408D04566EF9552FE2D87D2004E9F8E566
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-S9ZP31.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-S9ZP31.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-S9ZP31.lnk
- Size 1KB
- SHA256 4065d4eaf4143f8cf2e84d6682fdfd0ced93023b9c07d5fc8eb3bfd8440b7a71
- MD5 491180f5e3dd4c6bc896dd0a27fd9bb9
- SHA1 5acd71d9679a3aec7985f03fec048269436fc32e
- SHA512 1175fd3cbc08eb8b07bfd2c62d3852e510a8ba52277a367f752475f8fda8605b7034ea32af09dcc670ac0de8ffd3ccc6d0223ee63516f19491256abc36c50854
- TLSH T1DB3197042FF90654F3B38E7385BB6B1085BAB8A59E20C61E0140864C1022A00E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.