General
- Target DOC-5YFQ5E.zip
- Size 576B
- Sample260803-qbc1kayfjb
- SHA256 beaf176026add23d8cffe0960e3a27252aebf381d81c49e61d31b8edce4ad42e
- MD5 b23905735003a4aece6fa69b6901f29f
- SHA1 2f184fb3b80f519c2f7c508fbfea58bb08ae9750
- SHA512 eb08e0474210369e0173917cd8d8bb9cac31582fb28f8da68e11fa437d9f934718175a84a58fbcfc5ea0bba1017c3de380d46a97973f3b7d6f198ac156a3903a
- TLSH T15BF096B01944D015C20940F0595072F02260F3527300CE181541CDB32F152A7CF9CA75
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-5YFQ5E.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-5YFQ5E.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-5YFQ5E.lnk
- Size 1KB
- SHA256 dc12806509e6908aa60f07c4cf7cb734d17d4e81a8eab22cc6142ee11b1e7b02
- MD5 7c69c2a8888f63b65a0923487b5dc764
- SHA1 d23b7d5a271e112231c094f5b05be4a6ae5a64a3
- SHA512 40e464976cdcf0a38f46ced0c1ece9df5892137d166c2ef33d5feead736c1eb43051cdfa4e4111e388c0699eb7e732639893f6d2bd7f9308c82abebd5ac1a16f
- TLSH T1F63142502FF90624F3B38E7788BB5B1089BBB8568E20CA1E4141474C5022A14E1BAF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.