General
- Target DOC-N77I2E.zip
- Size 576B
- Sample260803-qcx25ayfpf
- SHA256 27220c4e85082ccd192c7c959be4117cee252e7a5b16f10d1fa9d346cf3aa59f
- MD5 7a822a4f1146a5f960bf4db97f94bcda
- SHA1 b1412ee657c2d37faa4f90c238b7c16672fb35ad
- SHA512 9f6f2726cbec68ed537ac183d8ef6e9eb1500961de6c5e2ec7eed5b805322ccd5015db383a984e59a7f9926dad6a8b564445328147ff550db261ed5eab2baaef
- TLSH T199F0415202718149EF07117842FB2F8560294D29388FF993C728F9005EB3C182DA8516
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-N77I2E.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-N77I2E.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-N77I2E.lnk
- Size 1KB
- SHA256 b39b3aaf301da54f82f4662dc6f13dd2df15637988e9ec4dbe461c796f1f0366
- MD5 742c499229d5ac97b85acf2fa407619c
- SHA1 0fae8c7f9024c43555781a914a56e59b518624c8
- SHA512 be2043fca45e0794bffe40e4bafd4f227dd71b02a155f0d44cf94fa14003b108401fda5dda3528f36b6c63a4dba792ef43f55e7d28c0811935a329c8eed7047e
- TLSH T17F3176503FFD0664F3F78E7384BB9B1089BBB85A8E20CA1E01414A4C5032A14E17BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.