General
- Target DOC-XXDYHD.zip
- Size 977B
- Sample260803-qe488azyhz
- SHA256 56c40c0250ec58a0e953139f170018510c0a074e0972428a132c86b9ead6af6c
- MD5 5838ebc3aead20d7a055512cc7f26035
- SHA1 953f7d24152d30453bc9c1656267542a96b21a18
- SHA512 040b64ccf45edfab3ff87d02ef2f753ff8812f4b6b3040636ad09efc9e4008d5e3ddaefef62f00f5f64e2ba4d732fdf17f8930fd9fd146c53891cece1731f15b
- TLSH T1AC1194935B4CB24AC2AECB32D0209998409BB93C9507AFD3322CB9B51ECE1A51F254A0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XXDYHD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XXDYHD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-XXDYHD.lnk
- Size 2KB
- SHA256 c22a9a4f0c3bfc7977d1df401cdedaab5933d23ae7da35e3a849c2dc65c5cad4
- MD5 2c50ce7dbdaf41138131a6088d8c3aea
- SHA1 6b0030a0f409b2e6d436247ee3e15c1172a67b03
- SHA512 663f1f069d6f799c767412ed0d672575a64380c76399f5218184f992d0143882d433959d444a5e09ce980695e805d38e4b8b0d0a360bc03e5ea45e390bdb9f00
- TLSH T1095134843AEA4198F2BF4E76ECFE6781897BB9915DB4C18D0C10824E1432B45DDB2B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.