General
- Target DOC-N7025B.zip
- Size 584B
- Sample260803-qbd8mayfjg
- SHA256 f5c81db36a4e8affa3cdf238867d338912eb2e83bc9a595e70739836f9c7d8a9
- MD5 1311b60fbb57361c80b4992ec8bb74ab
- SHA1 55fe93fa92f92024db8164020efabf707410058a
- SHA512 5e9f4af64f35cfa5b352a4b3f4a8ab7e8b514f240d19c55719b0ab5720c6750042ef53cc99bddb15edf2a644b7d66e8e89c41b9e54fd63a4f9e64ec82bbcff53
- TLSH T124F096F30DDCB2D4C0438476CC34DA6392E410D189BE1D04277FF903201896C085E4D3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-N7025B.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-N7025B.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-N7025B.lnk
- Size 1KB
- SHA256 71dbc85ad9ced763c60387b87ea084a996e9539cf689bb638f412fca980d19cf
- MD5 cee78d77a1017515cde73495fdf97398
- SHA1 6f9615575b7a1463738a1e796df6f9fb8d8d3e4e
- SHA512 6ffe0c652c47f0bc1e629f179ef2aeb5dd19870716e24ffc4a4f1b12a9d399e468e1c0c94ad45c8a1d80d6f54576193801788b3cddded0be3234330b4bbf0118
- TLSH T12F3197102EFD0A14F3F79FB394BB6B1084BAB9668E20C61F0140460C1062A04E27AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.