General
- Target DOC-U0E8QJ.zip
- Size 948B
- Sample260803-qea1daygmh
- SHA256 53ffe470c60bd563e8af6d85118b63fe842bee5d5ef64e670570e403433b1fef
- MD5 3e9aa5f8a9df390e28dba6ecd3fc5754
- SHA1 ecc764ccb42c8a3b136b5f557e1ffc6d2df8a752
- SHA512 4724816d4bca6f98fdea325dcf3492638217635fe0f0576a605116e681b70f1c387a564bea8e24800b5f7c8d9c74b798666d4070d175582f02c55cc3a815b65c
- TLSH T1831184B334E48D15C74060F8812ABBD9234B879890545162749A8D55B8A72D64B3CA66
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-U0E8QJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-U0E8QJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-U0E8QJ.lnk
- Size 2KB
- SHA256 f28e03b1ca21ed5bf8f0d9c54f0f1fe51e2f560ba12bdc5641bc2aeeea81210f
- MD5 cd4aaead4d2a50bbcc9645dfa6cf6b56
- SHA1 d79bf3bbdcc01ca3930b7235c8c3f29e80694deb
- SHA512 201dbe2d5fe02eb518c3d7989495ea4bd0c7413425ce7b17f3a8618809082244e9530cebfbcb29fe0d668f189e10ae77adce0667ac906145ce667dd5edad9c00
- TLSH T1D54145903BED1199F2FB4E32ECFE2B904D7BBD616E20C19C4950810D0422B45D9B7B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.