General
- Target DOC-CZCUMK.zip
- Size 580B
- Sample260803-qde8psaa27
- SHA256 dcf248a22b71e09d729cb5e29d5891f83bdf9163f1701b7bddac91a787818e1a
- MD5 71372c4283291aaf94e6da747be04438
- SHA1 76da851660766aead82952dde27671410c8567e7
- SHA512 10d199c1b5fe562f4a0972afc0fc4946f198f1ba5b0905b33363145bee098705635cc3bfa40147af224a9d57f41021bf530ac06ec560825810318353520264d2
- TLSH T17CF0EBBBEB069204D23AE5FC882B30B6AE9200EFD76A61BD17B2F05608383050F4143C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CZCUMK.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-CZCUMK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-CZCUMK.lnk
- Size 1KB
- SHA256 3ad274b81bba4a7181fc1c8cc370f901e030a682859f2790eb899bb865cea984
- MD5 939a98864bc090fe8bc012775785cb74
- SHA1 c4b59078666a9e97fe46146e363a6227ee9cfdc5
- SHA512 8f21bb66f29b4256009f827ab9426fc370c73d1e76057d39484906532e5e50fd9b4c4cbe90a17aa8a302142e952ee882a4bfe0c6e0241d446127c735807bbe12
- TLSH T11D319E503FFD0654F3F38E7794BB571085BBB8668E20C61D01414A4D1072A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.