General
- Target DOC-GW6BPU.zip
- Size 950B
- Sample260803-qd5tcsaa35
- SHA256 777d7aa75d5ad75f406046abdc904a53544e19a4a47d6e398aa20c78c92e9dd2
- MD5 5541bc2af97e638bf2d0dc964d816095
- SHA1 09e47f5f2c179d03521b87354aff89d3064c9a84
- SHA512 182482b1a91c05922a9899ccc0903d1bb0e418c426bc031826c725739547f37b34fd4803047101a57f88f5a06016c44408aaa6fe4aea396a4ec13baacd4d33fb
- TLSH T19911C8620300D723C89AD07AC9083F05C57D0B190D677B8E96A611AB1C7C47667E3C00
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GW6BPU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GW6BPU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-GW6BPU.lnk
- Size 2KB
- SHA256 a848f12f7fadd5b9b5544ce2d95f8d522e0f0c67194e20e4244fedc8038179be
- MD5 5177fcc12c03ed7b63920f726311811d
- SHA1 af481b2c7081d2b1edefab71b67fc71e47085874
- SHA512 eb59e80e058eaf2ff1e60db83c1c7062e6d4f1b7df2bf131d76e5df7f2bbd5c8c70aec97b0deac38389f8d91a576f1328b06d50fe04de6c477db7dad0f60dae4
- TLSH T1045158906BEA45D8F2FA9F32EDFE275186BB7D506DA0C68D0C90810D5822B05D5B3B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.