General
- Target DOC-FGEL67.zip
- Size 551B
- Sample260803-qbppcsbn4s
- SHA256 3c5b2ab5550fa2a69004a4c4ae51a89a9f3c9086ebc62ba774fc8c2497ca5ab8
- MD5 42f79151a9f4b493c0aabf791a66402e
- SHA1 5c4a85db2f8d0ac731f451856e8599c8660f6a79
- SHA512 c14e4f3967111d1920223ed9352b7ead0701cec4caae1406514187a1176412014a6388bda6dea09070a51011e5e4c0d00df080ff232e5664d3736d848c2428eb
- TLSH T13FF0C067D0EA4843D64180FA98E336560F2BA45C04061F0A1D1CD8D32C3DA167CBF5F1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FGEL67.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-FGEL67.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-FGEL67.lnk
- Size 1KB
- SHA256 d05c3c644889fc73df7ffaacc3ed7c19d23a5ebef8b871ea1b7ef9433e59ddbc
- MD5 f85d4d6bb5b7a66350d0eebaf399e8f6
- SHA1 9c4482bd065189381061c7b292b06051d5b19b1b
- SHA512 42590046a9569e077eb3b5da40a5f34fa937f0a33c8d6f7696f5728e43cf9927d3f900dd45390f3591eca7a71d3d93dcaa2c9ecb050db8fe69a796e4f644ce7e
- TLSH T1143121143EFA0624F3B79E735477AB1489BBB85A8E118A1E418546481472A14E07AFB7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.