General
- Target DOC-FIIYUA.zip
- Size 577B
- Sample260803-qcdcqayfmc
- SHA256 f3dfd502c0a60ffccba265c0576add8a76e94ca638153fb50af6503d6feb20eb
- MD5 fb6f721881a567bc948cfb245272fea8
- SHA1 661f8381b263665d564c02eac4983aff74a1bdb8
- SHA512 bc435c47d8722b83b9dc0c5ab153ea884614b3fd870ef31218500599ae50691fbe0b3448fa2e199814219f45747df7c5c0e6ba8bc0501cc44ef7c81f004682e0
- TLSH T1B4F026631472F503D50CEAFDDF6293D2711DB54F605CD3567F24C00456811D91E97B54
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FIIYUA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-FIIYUA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-FIIYUA.lnk
- Size 1KB
- SHA256 9ad5e8be9d04014a717e4a78159f0286298edd71d81cc5e3c4b2eae02d18e86d
- MD5 779e63f02f13dce2f3f6e694f732ef0d
- SHA1 c874fe4f813f654e20d6a666a8e855d0e1eb470e
- SHA512 cb53b2a5be17307b8879740212233c2adfce2469e80d9231733279ef88dfb1e1e227f3e996fa55112efc3c2812c9daf2b96fee0bf2a8c022cf42898ffa8bfbab
- TLSH T12C31CB103FFD0614F3F39E7384BB571088BBB8A58E21C61D0041460C5072A08E1BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.