General
- Target DOC-KS97HE.zip
- Size 795B
- Sample260803-qe1wsszyhs
- SHA256 8a45f404f237e30cd46d6c5c94463a8a0e1c345f0236dc9bb62b348d8c31a297
- MD5 e7916bba9f8d293709fc10d48a73ffec
- SHA1 27184e89653749e70ee83667ae7d941cdaa9c972
- SHA512 574b498a2a449f6c9010f765f303f6e6ef054991e00ce06ba68745a72849bb6a159e4796680514e12bf015a2da7360edb763d73d86f7585b9ecb59b98059e419
- TLSH T1EC01BA470006CD4ED92740B98C34A41EB2F42BC3429F2B9D13A8F368D250F41BE02B55
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KS97HE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-KS97HE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-KS97HE.lnk
- Size 2KB
- SHA256 aeea050d646270e53160233eaa1142014354563a5fb9895831e213e02d431960
- MD5 063e9134ef4d0c746d9b405afa4f4fa5
- SHA1 31423e9dfb861dc663ee1adac0981e2243f3510b
- SHA512 61633c6d96849463bd9b5112d793a10c929bc706f0852531ec5ce8c5d5d5b1f91ef41310049b36e62ffb95295bad9e0a65f3e3af09fc09ee1ad622fbe6b33b51
- TLSH T1FE4138502AEA05E8F3BB8E76ECFF7B50887BBD615D60C94D0800824C1422B41E577F27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.