General
- Target DOC-9BINXX.zip
- Size 855B
- Sample260803-qeadvaygmg
- SHA256 c96ce2d18e16dbb6f77ef9d213432ea0ab9cc094d1bc03fbd8057c60c6a8ca6b
- MD5 129aab6a71519e8767f566c6272c626e
- SHA1 7c2b3fb7b9140b20c1b1dce237d0a80bdc514744
- SHA512 ce87c40afb2383feee0bca9049fc86ba1be6dc2aca19f15a1848bc49a0cfd90573db0666cba437f0e53dc86c8f76552c9d799164dae20f41ce3c5b5f1ec5074d
- TLSH T10C11521257C34421FD3E067DC0F31AA9A7D3214800B26ADA103AF52BB55B2B5AE93845
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9BINXX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9BINXX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-9BINXX.lnk
- Size 2KB
- SHA256 6c03a34cd509a8c1a9232c4c66e89ab60e6ccd6e93dca7dc72b358201c714e4f
- MD5 dcc0874ecd6b9fb336f3f0d34a0b3fc7
- SHA1 a88dc5b68fae2feab37765a4f8827493efbdc880
- SHA512 3dbd968e7565fa7dd360f4cbc27fc1a0074e203b9f92eeb411930d1fcea5ec7f257484606aa3d594ce1790438a45b2b4ee60c62800a31443220e4e0941e52208
- TLSH T18741E0902AF905D9F2BB8E36ADBB6751487BFD124E60C65D0800814D1422B45EA77F63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.