General
- Target DOC-A81XFQ.zip
- Size 583B
- Sample260803-qdrazazycw
- SHA256 55f664b69090f1d810022280cfb3ce6b76e3c311356114ebc78750488d3481e7
- MD5 41484649a5c6fb0d56747855aad25acf
- SHA1 bf2ba25e0c5ef344800326e647e5fbde836bcbd6
- SHA512 bf182c418390b6e959782835cb940f2264e2a68cc0c7e7dbbe003a3e2af21de03bc28ad5a999480254a9c72b6d064dfef68a311a8a783b9d3137b6bb0e36ecdd
- TLSH T10AF02677868CD808E31140B91E6333C699404013391E25356119FFEDDC4D974A9AF4EB
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-A81XFQ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-A81XFQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-A81XFQ.lnk
- Size 1KB
- SHA256 999e0aa9abaf32ad527e14a0263338e8b2da3f92e932c70954c6ee38c2e83679
- MD5 a3059aa6a2c93a3c1ccf8e5609e379c1
- SHA1 4ea893dcc659ab2d7220bb0b9aa369c5f3954d2c
- SHA512 178bd573420bbf1deaea591566c03487bbf993bc8e39309b1d4cd06ddbc263cc8c96aa453dfde9a4f97e52cf7c263e9c86a1ab3f3fe16283a9d68bf7985ff85e
- TLSH T17E31FE503FFD0610F3F38E3384BB671089BBB9658E20C61D0150460C1072A00E17BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.