General
- Target DOC-ZPSJ9C.zip
- Size 582B
- Sample260803-qdmyjsbp2v
- SHA256 17842f453f007e023a1a3715ec4ce29f12d49d70ee19641f61af137f3505bdbc
- MD5 3abedea2c33bc17750d6a66be5b760db
- SHA1 280901b49d4e88b03e4a5e7738551186bf8e5c9a
- SHA512 64299bc0b1484e7262a9af66c3adc243369beea2e2b2a31f1f40349b1caf08e4f7a265183c310de52a5578bf5b2e08aa3d9949aadf39ae8a2dfc9e3bfd3fdb5f
- TLSH T188F047B37068C009D60717BDC0CAF6576A849542F50CD55A3278C5942C300A0274E1B0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZPSJ9C.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZPSJ9C.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-ZPSJ9C.lnk
- Size 1KB
- SHA256 7b022746ddbfa0549760ce03fb49337ba800d8003ac23da1fd6bf40234313bb6
- MD5 b939f22a6d6e31ac6564560e4e4ef130
- SHA1 cc620b4700e18519d4f647d1771dd25919e179a7
- SHA512 2d0e276add2b195ec9609db0d0b335d78af92e8b46b3600b1ee974e7ce3d2a55f9fa3ef9791834006109bd46efa85816108df5ea1206b7645a6dd62fc15cce56
- TLSH T12E3147503EF90654F3F79E7394BB5B1085BAB8668E25C61D0151464C2022A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.