General
- Target DOC-JXRBN4.zip
- Size 579B
- Sample260803-qaattazwhx
- SHA256 0dd0cc32110ef074f689adccc84702c530612d04f0fdd3da8355de5aa421e10c
- MD5 c60faa379d80f6164478b325dd3944bf
- SHA1 bafccf9544dca7ed950017ee882fd3e1fdfa3282
- SHA512 8f7fb70efdce24b23c34263b4146749eb975cf2d76a8fbab94d73cb1d8f9efede897a7f9cf6bb40b5252af48786fc44a5d2ef1b758386241854cb237947976bb
- TLSH T1F1F041E3D49FD501D60FDCBFA863588040B901D4420A26AA8937869A29E936F78002BF
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JXRBN4.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JXRBN4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-JXRBN4.lnk
- Size 1KB
- SHA256 c41b1c7fee0d0330dc6eddd0bc3f980efeec406807f37e5d027878e915709c74
- MD5 a4b6fbfa374bf793bd9451ac69b62008
- SHA1 2434c27bdf13c31bebb4f5c8dbf3b82ec70ea09a
- SHA512 65e0befae633c8065f7bda4f584265484dd5896535a225e7f58b4987f120487eb54da2eec1b954de648c905dfbeeb7ecccafba8cc9d76e57f9d5d718e90d186c
- TLSH T1933176503FFD0668F3F39E7384BB5B1085BBB8A69F20CA1D4151464C1032A14E27AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.