General
- Target DOC-WFGWGP.zip
- Size 582B
- Sample260803-qdg3asaa28
- SHA256 85ae015175d046402e57e8259e9150b15d265da2caf5b6cfac789f4d931ee499
- MD5 c964e2f059b6f650d74e8be665d17f36
- SHA1 b7958ba85c5ade4c69c6a324312dd3f915d462dd
- SHA512 a4726fc98e8e5176d3f7fb5920e774be2b59aa048ebde1930af347b90844d0c29a23afdd0d84fc68c4595c80125748947ac1203ba4468316836f906d7971fc7d
- TLSH T16DF0262760F7FC1FC7577D3169B79A63A4283216C06946E34725D1189D505F70F026C7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WFGWGP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WFGWGP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-WFGWGP.lnk
- Size 1KB
- SHA256 39c61c6343b3529b84228297b7a779b3e05f4cbe906593f14798e08e6164ef21
- MD5 66b74b97eedd6aadb83d9b174380a35c
- SHA1 6f89228076f7806537ebc4ab0a1406e05a343b6c
- SHA512 0a08d323207a546de6e2abf608517ce3bfee804869bef22f182775748835715f7810f57ad94c4a047a51b8dae48ea544f77dd80d96874ddbcdadaed965451730
- TLSH T1DF31CB103FF90618F3F79E3384BB971084BBB9668E21C61D0180464C5032A10E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.