General
- Target DOC-7883MF.zip
- Size 579B
- Sample260803-qagblazxax
- SHA256 38c7dce67c66845f0bc5a1a5bddddc127e8e610ba605558f1653ad75e4b2a5f2
- MD5 8f18e2d1d0525430f2646023ee0c3153
- SHA1 b20d9c1fd345242d98567ab4af4967004f6be340
- SHA512 772601c7985d7ef76a854b184e386d03523edb12437d91bcb8a01071c98eca3ac75343a9f6f1fb05b5fc90fed1ec1b8d0b12afb311c27d085bde133529d4362c
- TLSH T19FF026DD83D96837D981FAFF82C6513A814481DEE846EC171965F57C3C871AD3EC9054
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7883MF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7883MF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-7883MF.lnk
- Size 1KB
- SHA256 4451190b7f342c93e557ef5c972172aa829fd69accc2c9cd1fe5e0a98c2d60eb
- MD5 97dd528b6fac3eb51108b5861dc31867
- SHA1 83dd7e6bafc428a69d17e4617447fe22d5f0f50e
- SHA512 e513fc4513f8f8b09d48c094682bd798b0300689a1b982944f3bc84020d61c082e605f89a2a6152d08fc98d571071593ecbde858aa5d4e51700ff47ba2601b73
- TLSH T1C03142503FF90664F3B79F7384BB9B1085BBB8A69E20CA2D4141468C5022A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.