General
- Target DOC-2R419N.zip
- Size 583B
- Sample260803-qbfrfsyfkc
- SHA256 68a707737dffb9100591e29a16cbab8c4fa87c9f33a41d32e4d5b05215319900
- MD5 f52d9d3010f56103fdaad2c2b03a84c9
- SHA1 e32e00739480e88d260499dc74de62d8f358b713
- SHA512 90bb4236eaaceaab52a719e80b72dfe176737ad513c82e6362187d9bccabc468611dc62bfd8cd86779de31084c4541fcd3700d24f444c3d6f20ac3540181c536
- TLSH T103F0415B130E505ED18BC4B4E0F69EB581044880109F96508437C60E3EA4D999EE0374
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2R419N.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2R419N.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-2R419N.lnk
- Size 1KB
- SHA256 d6a64f95b39d39f4a8338b57a92258c72b55f38091f16c170596b8d6bb7ebebc
- MD5 63525257da9880a7302c8d5577ea156d
- SHA1 1eb6964ae3d4244dfd9aa74b901147f73a2377f5
- SHA512 97a9bfa8efe65f4f35e5c0cfe45bac648faaf0a6962ff6f303d6bf7968252236aece496d64264373acf93f3ee5f2807b874a460bcac30a3c592e86a6545bd7d1
- TLSH T1153147503FFD0654F3F38E7384BB671085BAB8968E60C61D4141464C1032A14E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.