General
- Target DOC-SEKOEL.zip
- Size 582B
- Sample260803-qdyp2szyet
- SHA256 d3e5367d7dc7967bfee4a1ccf573f71ad139e463f886c12334bb080af77ff6e4
- MD5 c3dcd2f767b95e501c57d94b3750b665
- SHA1 73cd1a767d38b4fb3bdb3b2e33cab50d21d6b6b1
- SHA512 57b2e40e3b5a0c457041f80944bf40f3f37c95aed8d4e1dff090544565d6c1b54844168bc6f8a2fc4878078eb4cf2c142b1d041849d96037f07458b67385c767
- TLSH T19DF0417B2EAE4152CA0ED4B62195A1E12B184594084371221977F04824A63B06FBEAE2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SEKOEL.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-SEKOEL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-SEKOEL.lnk
- Size 1KB
- SHA256 c7fed52ce7899695c471113033321f28c2bb888c5a5acece38206a8b582291b8
- MD5 5afecd8c6f31b67e0911062263f2c7ba
- SHA1 bc79f174f45d4bb126fe387f11b35f53decd1b55
- SHA512 de9c13e89f9a7441894447c0a1aff14324c11dc9df80085006a30128a2cac4e62fc4e8e1b041b8555769289e13a3dd0ef6b1e53fdfc459c1b279800709357c2d
- TLSH T1C1317B503FFD0624F3F79E7784BB5B2085BBB8968E20C62D0141464C1072A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.