General
- Target DOC-IV76XN.zip
- Size 581B
- Sample260803-qdg3asaa29
- SHA256 2127ce33b145675755758e79e02a558e03782241ee149c798c0e73f355bf530a
- MD5 95c6ae09ba0fc9671cbad379f4b64f74
- SHA1 b6a36cd682521b571d4cbf9979ed70e3d58cff97
- SHA512 d660eed998e5b274afee4cbdd157653a9d2774e755a78a289d63248ed02e05c39c9027d408a48c0ebbe5d2439306415ebbd6869bea9d53856e4680cd2956903a
- TLSH T184F04713094A909BFA8256F0267111944312F5028573611146BEA2CF1E882F89D9D940
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IV76XN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IV76XN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-IV76XN.lnk
- Size 1KB
- SHA256 9ef63f0dcf8e2394d332ac82f20a778143f180b99a4669efeda4b168ebb5aacb
- MD5 b8f6d1414629c8b39548751af693f968
- SHA1 38bd0edf37abf5059df7913fa2b0872e6809c051
- SHA512 9267865a7078cab1d9093f154a8917ea2fc1a2283738e61e95ff9a6cfa44c2d55a3cbacbdf8655d9c398969e750d81e01378d138b50cc524f8ecc7357e0f0199
- TLSH T15D31CB103FF90654F3F38E7398BB6B1084BBB9A68E20C61D0141464C1432A04E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.