General
- Target DOC-05GU1W.zip
- Size 941B
- Sample260803-qeq2laygqf
- SHA256 fd7aa90df49f9efb98ae3292cef8c9d673592bbe496a2e49f14f602cae9a8ca7
- MD5 5cedc12f4f7bbed9e52df061fe1c074a
- SHA1 d91b76a60f426928166af8ff15a01cc8e6be8a80
- SHA512 3b4055f09ea08bec01c7467cc36bc131c49b338968f88172cda53d769943084ef790bca15fc59a67a1315f7414507a2d6ae9f93334c1219eeeb992439a17ffff
- TLSH T1D21184366311830EFDA8EDB6F9547060E0228353B41AFFDE2C308D066447D27AC7DA00
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-05GU1W.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-05GU1W.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-05GU1W.lnk
- Size 2KB
- SHA256 1127c6980835ce3a1de8b1d7afd40f28c62f7bb9268e1f303e6f78758907884c
- MD5 66bdddd3d8e8c91f5b6fc11866293cc2
- SHA1 6ef87e0d880802c38bf3401f8d8490f8d377a66c
- SHA512 71007304de20427dabbab30ef9481094a05786a7ce1d28bba31fe73988be361a6f98469f199c4eeb700fd0a0bc1e5b9126c3b988b3180df44b84e0ac24e6b3bb
- TLSH T1F24146903EEA05ECF2BB5E76ECBA375048BBB9626D61C58D0940814D0422B05D9B7F66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.