General
- Target DOC-9RIJS0.zip
- Size 581B
- Sample260803-qbppcsbn31
- SHA256 4c7b4d94ed2161596da7ae41204d63ff8c011534cf1c5040b99d98dac2eeafca
- MD5 f06df7baa88a0defd2cd1642930b764b
- SHA1 3804f1fbbd0879f56a9d8ebc75a298496a8dba94
- SHA512 838016937f16e493223ee0498829e48f5fafe6115187fc6a05b1de5bb2e7ab5b7302ed5e29612a68998059c6ddcb855743eb63c3e42d5f6c1f26bb48ebd7d0d3
- TLSH T168F0262F41460744E817043A58579E1F943680E1404F13FD7791D15E6CB92A333F5565
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9RIJS0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9RIJS0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-9RIJS0.lnk
- Size 1KB
- SHA256 2384d1fad734d7b1efcae8e2f9e6167116537b06f46a3830c39dfbd85f86bbe7
- MD5 35f89f26563a9c784ec4ca1a5def318e
- SHA1 af7ce4513f9ea92d5f4becae19f3befb36ddc3f2
- SHA512 53287ebe84f69a1bb8457fe3d10da20e125a3ab8ba863b2c368b718b0a09d4d56ee767db55645a534fd08306771980d7165fd21946d4c7aff8ca14b4b0973cbe
- TLSH T1563176503FFA0664F3F78E7388BB5B1089BBB9668E20CA1E0145464C5432A15E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.