General
- Target DOC-AAW8EG.zip
- Size 589B
- Sample260803-qdcsksaa23
- SHA256 869bb501fd062f5ff181cf07c390970524a128878d838fef911312f331a4a02c
- MD5 6cd1770d0064596661cf586c12111af3
- SHA1 a36524f61c22664b48220f5c365bfca87a79d42e
- SHA512 536c0c640988e0f0ee8d2a0f18d3b45841fd36541ca64796682d51dbef86208b32de03c7c1da7a9fcc310bcdc3413ad8725f86c808cb06dd39827c42b6fb5c19
- TLSH T1DCF0412388EE3D9EC0502F324F65A98AE26146C64C0FD08A9374E50E6BC008D7B95EBC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-AAW8EG.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-AAW8EG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-AAW8EG.lnk
- Size 1KB
- SHA256 e3567c084d53185c22ef46af25bf7f37260a1f7717a89c60a4b9f78e4d4230cd
- MD5 8740ca60a99327bec0b94dfcf0574a74
- SHA1 144b19b861746abef4f6174fc36444cfe80ec925
- SHA512 f0fce3c1a5988a2ea6a113af77b2699c32266cecd51627760c6b4ffdadad4d3fd1a7a6f78caa1b4a62ab5f2058ac0bf227abce22b1e34ca1af6d51c3fe2c8927
- TLSH T1CE317B543FF90A54F3F79E7398BB571095BBB8568E60C61E0141464C6032A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.