General
- Target DOC-CFSXBJ.zip
- Size 579B
- Sample260803-qdhzlaaa32
- SHA256 9783b71c0154558c1b4c1a7d7f44a91bd3cb9f3c37aaf02cb5857f10c7f38db5
- MD5 3c47105fafc762cde5708f6dce2b2892
- SHA1 42e410f5a45e6abeb820d2e50b29751ae45d8eba
- SHA512 e6cce236e75ff0b27d4685b53b939729069d832d98c59948ccd046c55a1f1faea1d793672ba50c3c78bd7f2e795d750bedcef2a0b93813ab6712095fcb67902f
- TLSH T1EAF041E6926815D8C111F53E607964034EF6F64076ED432018B2EC5C3CA0854278CA11
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CFSXBJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-CFSXBJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-CFSXBJ.lnk
- Size 1KB
- SHA256 fe4f8ae62f200239aedff6d953dbca2337b68279220e944ee976587d2843d4e3
- MD5 e0d242d30c52f3f7e911c551b4de4b59
- SHA1 25b22cda41d055f30182f0825facfa71a9506737
- SHA512 74545cadc884af0f46659d200d9e2821a07f54ef97e9ea3bd1c3b1ef363235d591d4912fdc311c454e93089ab273760931de74e496485498d5a4114cff283848
- TLSH T13831CB103FFD0620F3F79EB388BB571085BBB8658E24C61E0151460C1032A10E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.