General
- Target DOC-LNBZ43.zip
- Size 888B
- Sample260803-qe488abp4v
- SHA256 136a6eb701485f1fe160363f0af147b4797578f5191c3999dc83b19ee5119159
- MD5 b677cc5569aca903826e6b2150bf1f66
- SHA1 840bf785420e01f30d76c5c06672805a538615ea
- SHA512 34f6e90dc48febcfaddb9ff78425ff8bc22b49c156d63f22543bd06c5a8ecd630bba1fd0e5cb2bec03ea7ca5f167c1ca0d38c9fbb158a455f35f4dae2f7725c8
- TLSH T1EA11638DD342C293E0AEC0B3151226CA72B1EE9A131B2C02FD4B69B855220E4DB961A8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LNBZ43.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-LNBZ43.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-LNBZ43.lnk
- Size 2KB
- SHA256 8319ac1eacfc4e0efffa84985c300d245716daf54adf5dad290c0dd9a5c1f566
- MD5 fff30bb5b71b604b73dfc40b68ebc088
- SHA1 9334ac98b6f01a4c886fb9e17f55271b1638a31d
- SHA512 d12354f5e191cf43badaf49f407ed1def47d5927d1d5c0b7a3557d442896ad44355fa1762f1de05b19d3106ae58ca46e46da13e43012a565d3d4b775d10a5ade
- TLSH T1F0414B903BE905A9F2BF8F72ED7A6700987BFD525E31C59D4801814E1872B00E937B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.