General
- Target DOC-H7BNKW.zip
- Size 551B
- Sample260803-qaspmayena
- SHA256 4360c3eb41f9272792f4d22ebbc57051b7fc0ebff34f1a33dea7b6c78ad5faaf
- MD5 52604e2716123415a0ef11736dc13db3
- SHA1 c0e0c4ddeea660a0c7d8c946b9e069504b00be71
- SHA512 b8a9170485b0201b7579f509ac8639e238071e487315e61d5e63e93dc417c0d8bbfd21b32c499fe7fcffad685bd59a4111bdb4ac30c3b45b9a2f89b66664762f
- TLSH T1D1F0C067E05A4C13D641D0F699E376860B2BB94909061B0A1D2C99C31C3DA167D7F5E5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-H7BNKW.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-H7BNKW.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-H7BNKW.lnk
- Size 1KB
- SHA256 d05c3c644889fc73df7ffaacc3ed7c19d23a5ebef8b871ea1b7ef9433e59ddbc
- MD5 f85d4d6bb5b7a66350d0eebaf399e8f6
- SHA1 9c4482bd065189381061c7b292b06051d5b19b1b
- SHA512 42590046a9569e077eb3b5da40a5f34fa937f0a33c8d6f7696f5728e43cf9927d3f900dd45390f3591eca7a71d3d93dcaa2c9ecb050db8fe69a796e4f644ce7e
- TLSH T1143121143EFA0624F3B79E735477AB1489BBB85A8E118A1E418546481472A14E07AFB7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.