General
- Target DOC-YUIRFC.zip
- Size 584B
- Sample260803-qaqv2ahh76
- SHA256 7086d2554b21d1ce6388d0a0cef204518c73cda9ace06d130c19cc4479a70484
- MD5 0d5b37589d0ba60802e533fbb81d5c83
- SHA1 9a9f6480aa2cb1e7af0990f68d1f808b9b77c086
- SHA512 5b09ba7f4d52b6a43183a1a7af03dca440f93f377a6ae3c8f3606d0984a4c5968775070ceb76110394ed5d3bcfa7c2647e406e7490205b57a1ac5c44e258ca45
- TLSH T1A2F0412B823EB007D70CC4307D2B390AB14BA81891CFB04963A4E53914B0580FA11A24
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YUIRFC.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YUIRFC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-YUIRFC.lnk
- Size 1KB
- SHA256 fb73a632df89b8831c3c5763a53049d4cffff8084d038398ac1a33adde9ea32f
- MD5 c5ff2319227dd7cdd123a2721f09d18b
- SHA1 04e83b814a6001b80a96a4dbc10dc92004ad97d7
- SHA512 ed2372a967dce72af8cff00ef36bb1cc179162ded6f1dad708ce5fb327b6583790f49851677d39b14315b213ef94428bd4c7845f5107d64afd99ead9472d19dc
- TLSH T10F3147503EF90624F3F78F7394BB5B1089FBBAA68F25C61E0161464C1472A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.