General
- Target DOC-D8R3KI.zip
- Size 590B
- Sample260803-qbcd2abn3z
- SHA256 d4e3873b8c72a2f88d0d35d84fe1ff8d68c0794ae11d5ef50f2bd79e5866ac1b
- MD5 dd3b7a46d02a8c542445f4b06a4ed34c
- SHA1 829166e5f7eea515e7d0b94e320ac91c101e05b1
- SHA512 96dc7a101aab8187a5c8e304c4eea37dac73e7946f7bc62684eaa6dd45771d1c470092418007e4e9b956f0912e54875491eade942018670405e4277e6500b59a
- TLSH T173F041E6C08D4340F286B3FC1824AABE27324D07411E6B1BC9D8C98818104396C05240
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-D8R3KI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-D8R3KI.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-D8R3KI.lnk
- Size 1KB
- SHA256 107759724e34229636b8b7f3b48ef61a25d92cf7340388eca8a9099d5384cf7b
- MD5 9a5de584a4e96dbcea721c795d31927c
- SHA1 f3695aa38485815a66483e36456ee7c6da7b0d8b
- SHA512 8583bacc1d198f44770220cd580a2d1b601333e7fd65ec61d60a55e227f0b19edb17e5299aa9776b7883e67859cf045b26645c5ee4fc77bfaeddd438e7874214
- TLSH T1FD3170503FF90614F3F78E7394BB671085BFF9659E10C61D0141464C5072A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.