General
- Target DOC-IYCEC8.zip
- Size 589B
- Sample260803-qdacfszyaz
- SHA256 2529e368e64d5c66da1717f5e222d1d61d4a11371b90a72e02c6a2a28c8e8893
- MD5 cd2ba7234c9682a2fb6f2950460064a4
- SHA1 4aa87f28a5d83fd5a6a23d400b4c5de132f65bcd
- SHA512 934ce9f468c0c5c39d8ed20482ed7a20d1a43d9be908171b3928981fb1efdefc046c0f2d0a5a9208e74106605d71a9b9bf6cf4cbe1a65c67f0b1b0e901c812d9
- TLSH T13AF0E1D3499AE503C217E8B83539395BC966B08303297E2957B05E98D829F888EC0360
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IYCEC8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IYCEC8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-IYCEC8.lnk
- Size 1KB
- SHA256 0db3855c47c113341bf4478e1137c089f3ab753ac29b0f1e2d8a506b75edba50
- MD5 bd2ca419003caeb6b89af33ce100817d
- SHA1 fed592eefe1c7a3514711d6b4e911b2011e02bbe
- SHA512 79884971d31dcc62c5ccea679b6e8412581388c8d5a3edbf37feb2e1850a689cc94f74fb244b7fc95040db1452f7379ea99e2c4fe46728076fcf0fbb37d73360
- TLSH T1173147503FFD0668F3F39E7394BB571089BBB9568E60CA1E4191464C1062A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.