General
- Target DOC-3JWFKU.zip
- Size 584B
- Sample260803-qay7eahh86
- SHA256 0a082e758290c1d1227ad7aa94330bd4e3159cea081000ae796b0ad9e2d152e6
- MD5 277114bca31825c6fda4244c7ce9002e
- SHA1 c5c0df9027ad7d77c7f110b352d5d8a2fc6ff9f7
- SHA512 6c03f488332ca7f8d2d3f6f7beebdf7f4a0b8666fa08cde8e72863c097b7947836e32775347bad626e346b1207a93efaa9739d7d9df3df9a5b12e17d076f2363
- TLSH T1B0F0E163833854D5CD2AD0F150A36732174DE2220453371A273DE386B43D51FB1899C8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3JWFKU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3JWFKU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-3JWFKU.lnk
- Size 1KB
- SHA256 d9c59fc2afd8399d9105a244b03daeb373443aa86375985fe944af9f419f5151
- MD5 1f2792a2775eb7f1e8d55a83ae8e7248
- SHA1 b0468882782af79932c7fbc59fddd6cf3fc4dd0a
- SHA512 457da476b71cc54f474fba108a54afc1e5fadaedd483048b5b8469bf4a637c13f95190f53b9c926a57505d43561e8be98af44230fce2473caf517d166a8d7ad2
- TLSH T1103197003FF90614F3F38E3384BB672088BBB9668E24D62D0141460C2462B14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.