General
- Target DOC-3RKGPG.zip
- Size 581B
- Sample260803-qc8tmazyay
- SHA256 e3ae9108cfec076d1c46ad26bb033ba74e974183db7e71271aee658e061d981c
- MD5 d8ad386e724088489badbd89c995cd53
- SHA1 46b1278ea7cfed58963e1f23507ce312f2e3ae06
- SHA512 12b1bf963edb9a30acb5042a66d835c6da1edd5d7d9909987ef29a22d4bcb98d0c107e200093a926007f4fa90044919fdd7116b21a13f3d3cb836b63b8b6e9ca
- TLSH T115F0E1A5A5D4C8D0C903C0F2AC541C571D717412203A4B28112BEF8C782625A9B0E2B8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3RKGPG.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3RKGPG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-3RKGPG.lnk
- Size 1KB
- SHA256 878482fef0d6430d5fcb9b65cfd434e590314f3031c8bcc8eb4de61dd09805ae
- MD5 34f869aba7b6dc8964b9038489bad2bc
- SHA1 3409537891d99f30acf7860185faf02fa34c2645
- SHA512 ef37c89f069dc99f09a5c77e8dc4ef363658876a8d80980c584f65b7f87707021cf9b4c845ee733bd7b84aeb64e37ebeda3e8817e8a090ec1db066ab0d20b0bc
- TLSH T1F3317B503FFD0614F3F79E7794BF5B1089BBB9658E21C61D0145464C1032A14E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.