General
- Target DOC-7W2QII.zip
- Size 582B
- Sample260803-qb7vyayfld
- SHA256 f476c830036a51f777093ff4c8b7c2a8b644d52dad37d263489a5bc9c86e4c71
- MD5 a01ab5931cb15aeb5789b14c2b7a4e96
- SHA1 6f30749ede6e67b1eee29c019140566a1f9b7f41
- SHA512 2c906ac08224cb7b30f096b5812878c6773b331975794d336258a62b21ce2f1ff695f44cbfd7c40d59e21bfe06f7b381515d232149efe964f4b8cc104b55ee46
- TLSH T1C9F026F95214C86CEC0FD1754D1737518213704C30C520DE66D5B21D1F677636695816
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7W2QII.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7W2QII.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-7W2QII.lnk
- Size 1KB
- SHA256 7a47ae57093877b42123c52afbede706929f757429c9d774e5bbe050153d3eec
- MD5 4b4955dfc1944356194192c2c6b07344
- SHA1 00fc613dfb0f1331e6b118616ddaa4f68aee4140
- SHA512 72719971fe367ff7a577c84df7620beda50954da006db86d79f82a26a739c9f92991ba6844dff84f9f45715290d7a0fd6dc6ea6a8f675c28916822719d799400
- TLSH T1D4317B503FFD0614F3F79E7784BB571085BBB8568E25C62D0141464C1436A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.