General
- Target DOC-J7M1MR.zip
- Size 981B
- Sample260803-qd7mysaa37
- SHA256 b51569cca2e03bd76eebfd351ebcd9c8bb1f1556b61afab2a0c78594f095cfea
- MD5 7df2932f44584ba6a339105dc024a75a
- SHA1 d77e51a58532370e66567ea5c29a27dffc15a71f
- SHA512 0710ad1412f9a936f072f1c39d0178e0bfce8e05bb862bbf4ac8ef77cd0803ac36c90e1b673ff782157856cc6fc5179d6f58337f23c0a76db0ee2179f6d38606
- TLSH T1491161D1FA819C58C9A34130803EC3B2832525053F2A798F75E698758CE494E8DBD27E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-J7M1MR.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-J7M1MR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-J7M1MR.lnk
- Size 2KB
- SHA256 bab610b186db2acb9ac38190bc00a18b3c08aaa94692ba20c7fcb41a9703501d
- MD5 365ab17306869b045113073790cc62de
- SHA1 892b6961e55620d2b105fd239ed6ff1d9c656ded
- SHA512 f507218b32569e893d75011dadda1f4de89d34c01a495ab0a56dc74d50bc6fdeb676cbfa9538e5802f63a4e33cee1be73a2148f893a47a2ed6f7a862ad6c2285
- TLSH T14751449026F90198F2FB8E37EEBA2B9048BBBC516E20C5CD1840824D4431B41E977B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.