General
- Target DOC-UK8J0C.zip
- Size 953B
- Sample260803-qer9naygrb
- SHA256 7b4f00408337a08f968edd67f81c1b4f1c9aed97190d703336d466fb6a2c5249
- MD5 4976bc2a4d81ca192858f0b6e0bb6ab6
- SHA1 d53bc6482ea52da1d74c68213f4194fcd16869c9
- SHA512 4cfc172cdef84b48c2e2aee86c57b2de0f3dfa2c8df445228d733036e29dc385d48b2f15b0a84ce922f340f4a4777afd1a565b787f644555e900a1f048b007f2
- TLSH T14C11CC9175104095CAC55C7769D42163C763637329C7E5931336CD476F90C499744710
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UK8J0C.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-UK8J0C.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-UK8J0C.lnk
- Size 2KB
- SHA256 0c08ca78c421e6a636984a52e91cd70517a1865cc6c5ccc26477fabf10845b72
- MD5 f6ee0e091e53c1a2ad2031312441fae7
- SHA1 d3cbf5279bf767c1606f13c148520cfcf07ace8c
- SHA512 92fc46a3bc7844ea767fe881c740c58ebe95a154e5981f654b2d0105dcc28694d62b2ba4081437fd979fc93d3106c7e0322c14a0947213a0b6b72b49169d7144
- TLSH T1575100503ADA5585F3FB4E76ADBB37114CBBBE926E61C6ED0940810F0522E00DD73B62
- MD5 SHA1 SHA512 TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.