General
- Target DOC-1PH0SJ.zip
- Size 981B
- Sample260803-qeptjaygqb
- SHA256 3bb05ba789b0f0925aa8b1ebfbaa502c8abb210cee5116709eb2e6370080ca24
- MD5 6c3b48adff7b02f5634468d0d8ce7a4b
- SHA1 a5c3fed46eec442db79117eef249313c956e382a
- SHA512 4dab4462a7b2144a0da07e5ed01ee811adae9ff95b615bd11d6a84a2b5a940e6ed3d61feb1a9d4671223a7892cddbd4990b8876b61acb6904c6a6a896a7804df
- TLSH T1D711549B5A038497D65A83FB0137D65E7A51A808278B704B4AEC71FC6A3090D5358715
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1PH0SJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-1PH0SJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-1PH0SJ.lnk
- Size 2KB
- SHA256 c28548586144a3b360550697a555727b25351962a5ea5f86fbd67cd9c0e63f22
- MD5 4e39ac37c2de202dada695f010963cf9
- SHA1 4eba7d87b4fa3dd7668edfe01b3c72bc49072366
- SHA512 26388f19d37d8a44748aa12314548062dd95a7b74da70de12f885d49392cb15a6bd23a59cb65888a51d5f4bdcc847b1b6e156c1942ecd970af0044b1c10d844e
- TLSH T1D5513A943AF9409CF2BB9E72ADBE374149BBBE716D60C68D5440824D0826700D977B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.