General
- Target DOC-NCPX6Z.zip
- Size 938B
- Sample260803-qe488abp4w
- SHA256 17427a2476bdcb288210c4bf49c1f78b61b7c1bc5b47f1ecd5df88f4b972a7fe
- MD5 f64ae25a5dfb345c7a47ec180008a087
- SHA1 896704aed9a665bba2c9fde9fd16c4239eb01351
- SHA512 c61893325998a9ba7d0c41922dd39134d850b39cf2a0cc199a6af2897c2c349fdef7c0104ce9839d0cfca1a66e672c072fd279b17f4335a763227f2e72594b8f
- TLSH T1F811C871C58A22CECE43E03C373A85EDA56A95D38705981A87B9720A76C7A418E473E7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NCPX6Z.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NCPX6Z.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-NCPX6Z.lnk
- Size 2KB
- SHA256 fd428b3204842dab9a6c4e88cf584fadd7c2f6c8eeda5942e699c7e0f4ea5778
- MD5 633da9781feae00d536447eeba8e6b78
- SHA1 e719e0d5870199f9d66b1014ae2a4766da776243
- SHA512 e616cbe2629e4728f290d6f340abe653c85fb994d98810cda755f05bf62fbf2e40c182fc536cf8e6069d5a8fea74e11dfa360d54df57bf90424e6f4a597c81b3
- TLSH T1094147402EEA4098F2FB4E72EEFE7782847BB9617D65C69D0940854D0422348E577B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.