General
- Target DOC-D0671H.zip
- Size 846B
- Sample260803-qe7pcayhka
- SHA256 09d70216bd8263642b456ae662c823b148099dcd98de18fab2736237eafa4854
- MD5 fc4b77045caf8fb67388fd0e260f391b
- SHA1 bf9fe24a1a599b3ceb5256ff362682d60e05b2a0
- SHA512 91efd69b7de29bfb0fe921c85d6b3e01fde59718707f5a94ff846d57b435730bddbcad8ea59dd70d4b7b2fb8757823b04df88f0f7d1de222fac656d6a7ddcf41
- TLSH T1030152F9A138364BE7BFC5F598B11534362E01D601AACA563BDDEBB81C241428492468
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-D0671H.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-D0671H.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-D0671H.lnk
- Size 2KB
- SHA256 427449e8054e762f25a3e2e734299f88882f53f1f452175f0f4fe4324efe8ad2
- MD5 d27f72a26f811c75af7f36ae74d60407
- SHA1 d148eb0d29fa3cb02150ab018e8149085df45381
- SHA512 35b3ae30db5f26075ea585df94727bea78b12f8eb50a512b6280d043f70a7d0c75b17a403f05bd5cbfa206c2abad6e207087cd15529e4ced4f1bb5d12b3b9fa7
- TLSH T1F24164803AFA05E9F3FB4F72EDBA6381447BBD606D61C1CE0400820D1522B15E5B7B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.