General
- Target DOC-QMZ50B.zip
- Size 580B
- Sample260803-qdkhesyglc
- SHA256 00259e2b68e8767e3633c03b22148698d963dbfa2c43cc2bf8bb18a3c1d15d86
- MD5 ad6881f508d8a8bb3fc6cead24c499f4
- SHA1 4fc6533f975b7489544bb82b55d25e71e048a59e
- SHA512 766cda8fa69459fa92ae227fbad11e99a09ed0499183c6f3053dcba88461915dee9d9f81e5e3041eac6602b5881a92d0cdf2f825aa1cd4f45e69e519bb59b5da
- TLSH T1ECF026930760D50CE5B4E03CDAC9AA1E92CC766A42F8F7F50258F55D4DD99352DC6D30
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QMZ50B.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QMZ50B.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-QMZ50B.lnk
- Size 1KB
- SHA256 c2e908251c5d2de9c4cf409679edefeb55cf9c995a618d44af6f9b643cc20e1c
- MD5 b42100facb01b0e000d5457670c7dbd7
- SHA1 0621a1a008c307917d7b511f737bbb96ca857cae
- SHA512 b881f07d711d20e666b123502f008a9427ac85fa0325f2b2616a3b310350f5f1ee1873c435249330bab0dbdc2f8df1d38d6d5e1ebecf8a6145a0aa57eaaea1d8
- TLSH T1523192003FF90620F3F78E7788BB5B2098BAB9668E20C62E0141460C5022A01E57BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.