General
- Target DOC-IWR02B.zip
- Size 590B
- Sample260803-qbc1kayfjc
- SHA256 37f2728f4b888725603d5f9d42543e26b309191c323e615d673f5dba86f0f0f7
- MD5 85ab66ab4ac463c01f5126a6f3a52bc9
- SHA1 758f9eedfb02ba95c3148ca956cab4dfb443c808
- SHA512 dd6e9f72c8836dce80b0ba19708f5b5d2f7889eabc0435aa5d038d68ac5fe1a38623ae7b7c1775a8fb8d011bbb41d28395b00a84582cbc26a5edf1dd1376f1c4
- TLSH T13FF096574713440FDB06A0F9C6BA020CE1BEC2CEE049072BA5AAF02C79881C31FC1CA1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IWR02B.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IWR02B.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-IWR02B.lnk
- Size 1KB
- SHA256 7b9e93433388897b3028d81c2ac9ba166f87e3d7e5979c04568e03787ad57658
- MD5 e1672599c158119abdfa2ce710b28984
- SHA1 645d04e396cfc1bd0278556c7b8cedc8bcd15ca1
- SHA512 eddf1fade74d33908075924220718c421eee25a044940a277832c689b5d283b78799cb05ee4daee3b40fbacc9b2cd6465af48ebe5aa84d15888357ecc9a2a98c
- TLSH T10931CB003FF90A58F3F38E7384FB5B24C5BBB8658E20C62E0040460E1432A04E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.