General
- Target DOC-4FDFJR.zip
- Size 953B
- Sample260803-qeptjaygqa
- SHA256 da51ea8d2a877127d8b12977e89d947b214130ac9c666fd8a1100b2a4531b9fa
- MD5 9e2867790f67cf8c799eaf9680d85609
- SHA1 7a6413fd41bae6184b0bd2ae589c702b22cc00cd
- SHA512 bffd50c2b7516ff0fe244008e85d6232ea7ddab73119d2425861afe7f31de0575fe088fd6e747964dc90e3766f7f7bb14eb99bd6b9a73509759ffb14425c8273
- TLSH T14311BB700363BC04FDDB14F50D7553A665039544902514B321D6B2D5D95A1CEBDB17F6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4FDFJR.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4FDFJR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-4FDFJR.lnk
- Size 2KB
- SHA256 b722af6a340d697cf2f00f1297efdce74f72359694c0560b444bef6744adcd92
- MD5 2cce1d5fa9e0ccbd13f8b8e2809d0c74
- SHA1 8aa6cef2dd5f9da6de8e9e55e300acf598481d42
- SHA512 3275a97f4a43f1894653f4986df380df982f0e1804283d759a6044d535e94cf5b0d5051078ab1748a46c6afa74be0d17ec92976026072b422754238296bcd36a
- TLSH T1E94156803AFD02D8F2FB8E76D97F274145BBBD556D70D28D0440814C0822B44D977B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.