General
- Target DOC-FWA7Z7.zip
- Size 801B
- Sample260803-qe8lmsbp4y
- SHA256 3e645c9b9913b43ef324c04c151218c89469edca8fc7b17b24aea9ff2d4cfab8
- MD5 adb7dee54e0d9b7399bb5f3136c36a9c
- SHA1 f1cd3ffe6eceec8803837344ae506a71d267e87a
- SHA512 7b2deccb524c46dbd85397756f395dd19135ab262e9a6674835b10edcc97f3d24479c221e62a5871c645ff98fb4aa1e529feb5dd9087e58cee2665bc39767a53
- TLSH T14501416A3C49965ACD3DDFF99E8B602CF23204F930DA391A59A044BC96E13966B42013
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FWA7Z7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-FWA7Z7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-FWA7Z7.lnk
- Size 2KB
- SHA256 16da3bfbcc1364804518d5c8e536639c704ca2284cd4f441beae410804f3a5ed
- MD5 cd865642a559dbd9599ef17fdf18bda6
- SHA1 990e9017634be423a34574e399fe0546917f8530
- SHA512 f471be8f58392a9e3d7736cdaff32c6ff30d08353a2c74b43787a3d627a5694f79235a07ab38e25bcf8ac2e73055c95425fe6fd311393ac1e969fd4557bf8a35
- TLSH T18641378026E904D8F2BB8E76ECBE27155CBBB9965DB0C59D4940820E1822B05D973B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.