General
- Target DOC-PTJHF0.zip
- Size 582B
- Sample260803-qdnj3sbp2w
- SHA256 7b0cb01a1beaa0a21761eb35fb02706f9b0cef3d2cf44dac8289fec04076f981
- MD5 dd6dcb1f1f8b8ec81ac1d982364ca9cc
- SHA1 009601da3e509aee066df5b0b5e9f0663e32b5d6
- SHA512 2c4379812b58286c94d20a3309a89233da7b90cc408ec0b86168c4fbece67da6b4c9c7dc17f3c21a2d0fb07d1a30ec3af2170331fe46cb96cd3d70425f185def
- TLSH T1B1F020629B6B1848E0040133E82773C208162EA05E979CEA626DF82F19920A8F6464F4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PTJHF0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PTJHF0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-PTJHF0.lnk
- Size 1KB
- SHA256 7aa7fc3b83a79e633c6daf89ec18399d0609046f84ed8d4bc2e0af01c2892075
- MD5 8cb58b2ab3ddf1664d73697ef15ac1f0
- SHA1 763c43b1137271c0b6af81e63287162ab5b50f3f
- SHA512 7954cd232939fa4ba5916d1826081e10c3407532cf838849b1dbb0ec5172948e9d2673eb0a8ed30505118b90468fa3a05400b16f691ece431f8ccd5b093cc413
- TLSH T1FE3147503EF90654F3B39F7788BB671089FAB9958E21C61D0141464C1062A14E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.