General
- Target DOC-S6G7HL.zip
- Size 581B
- Sample260803-qda9razya1
- SHA256 e43f518fb6d4d1f9d43d87f4534fffbec6428aa27bb9dae85a484dc727abcf19
- MD5 ab3c14b4057cb567d117353d97cf31a4
- SHA1 32909fff59b572ee08a97013e7d80567bffc57b8
- SHA512 fd8255ac65e227da2ee35cf6039fbd79fabb363316e87c2031066ecf732f9ab7e4b1341a16f11750bf5c3e817efb4c5ea5151e70d571aecf1808c1e969121785
- TLSH T180F0EBE3502C1181D509D97DBB74FA876820A2026C876F51213EE80C2E2C1DB6FA6DC0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-S6G7HL.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-S6G7HL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-S6G7HL.lnk
- Size 1KB
- SHA256 d3a1464139dc5f0fd05b812966ca4dfd75ac0af5b34be68062e6c2cfa19cfe8d
- MD5 4aae7a098213c04daed2275d8d5709cf
- SHA1 7a538aa7829945dae85a4312004454fba4990a54
- SHA512 56b0cff457d0843c123ea9e5cfac7bb10e584583909b656543d3f49a4fcd7b318d87abab9eb17f9d8e049b15b3ce861a2c2e4bb5f9fe3a5752a0d6cbd24cc955
- TLSH T1E6317B503FF90654F3F38F7384BB572085BFB89A9E20CA1D4141464C1032A14E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.