General
- Target DOC-N2X1UL.zip
- Size 551B
- Sample260803-qdacfsbn81
- SHA256 4e33d5d20bdf17dd23ec29a25fa338773b92718c13a9ccb6f46076f2e9f86a8c
- MD5 ad4647a574e774227e47132e5aad0de8
- SHA1 04ff70fe24914e1fdc9c5b4b93ac7bd3de918ace
- SHA512 badb78961cfd1ceeb902724d4610e2d106de88bad509142867fc1234a6c52e89a76cd137a9c299d33565d2e458a596a041f33b5bcacda093d0ccaab7a8cc846f
- TLSH T14BF0C067E05A8C03D601A0F999E336560F2BA84824061B1B1E2DD8C31C2FA267C7F5E1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-N2X1UL.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-N2X1UL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-N2X1UL.lnk
- Size 1KB
- SHA256 d05c3c644889fc73df7ffaacc3ed7c19d23a5ebef8b871ea1b7ef9433e59ddbc
- MD5 f85d4d6bb5b7a66350d0eebaf399e8f6
- SHA1 9c4482bd065189381061c7b292b06051d5b19b1b
- SHA512 42590046a9569e077eb3b5da40a5f34fa937f0a33c8d6f7696f5728e43cf9927d3f900dd45390f3591eca7a71d3d93dcaa2c9ecb050db8fe69a796e4f644ce7e
- TLSH T1143121143EFA0624F3B79E735477AB1489BBB85A8E118A1E418546481472A14E07AFB7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.