General
- Target DOC-60Y9YC.zip
- Size 586B
- Sample260803-qagblazxaw
- SHA256 f933e8d1022abd51c85ca7c7c032440bef2eda8a7b39d1d99c3b9b131d503d57
- MD5 49c471ce18a5ca3ba4e5652a5d5f0744
- SHA1 0d190adcacc494328dff7d22a4213a81e40689ba
- SHA512 4be9bb3d3f201284cc48a8c143a2e1d16cdff74aeef31edeb0f2176623c23cf579d976a9a6759117eb30ad20907bff496f61f365b39ec55f785108adce54920b
- TLSH T18AF04119A7AE400CE07E60FE457B3B0AA41AD918308FFC62C00581DC4C15338213A0F5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-60Y9YC.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-60Y9YC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-60Y9YC.lnk
- Size 1KB
- SHA256 2f4bce5c902e105d7f0f06c6c82b5a4fa7e61a89092d8422c3468e64ed5aec42
- MD5 c650a567fb5d9d7dee7550265a4a1f23
- SHA1 4754c4cd4cd46eb1c750beff33584dea2d77543c
- SHA512 8b4c45ee53b6eaed50443222894d7c8de95a849634e2eb802b42b2ebf4ba9fbdce97000a7981d83923a07af89b8d2368c9c1f3eeb66ab257218f8a6e486ac3eb
- TLSH T1CB3192403FFE0620F3F78E7388BB5B1089BEB8668E25C61D0141460C5032A00E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.