General
- Target DOC-9LV2CA.zip
- Size 583B
- Sample260803-qbffpayfkb
- SHA256 7c0b914f85ec6641c84a5f334f2f3ad5375d579a1b765785c18fd3aeb73bf5a0
- MD5 52a7f9156bc7a774545c51774968f58c
- SHA1 fe578a057271398ec6d4056f38d2f9e3c4bfc99d
- SHA512 c6127d708f1f9a337e0bbed63db9b61c199ca2dfaf13b04e77c376fbf5ba3b9f5f1f16e9be7cf395931476ef8925415f185f04a23b727129fa30212a9b2c751d
- TLSH T16BF026F314409D43D06358FC5923EDC5AD667D4374136A67393E610A549E4E9299C832
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9LV2CA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9LV2CA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-9LV2CA.lnk
- Size 1KB
- SHA256 e009e3b0922542617e39892f3cbbd3fa8fc938468ae71abf5d680f0713a1ca34
- MD5 046646dfadf93dec647ab7cbe0e8da3a
- SHA1 ab97d4431a3f32b20e6b43251ff6eb5ef9f5c31b
- SHA512 3ad89729b82f97d23b59a35b07364981fece6527ecfaa8e4fc06788db99c01d2823ba68360c18e3d75ccab028949b51e7862b9132e1488438f610c3e6a395c0e
- TLSH T16A317B503FF90654F3F78E7388BB571089BBB9558E21C61E4141464C5072B14E5BAF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.