General
- Target DOC-X3ABYP.zip
- Size 963B
- Sample260803-qerm5aygra
- SHA256 079b4a40d207cdb4c89d60a941214fef48fffc7081d3ac8181251a53cd623182
- MD5 ad70ef46624e48e5e8068f05c06bd0a9
- SHA1 9684ac6c2b49c5993e525c5f67a87278265eed2b
- SHA512 a9fb80ef27cd5e0c62b9ec7d33b069f68781f9bc47c377f222580da13fc7058985659755057748d8648b72d7add2b1a247ca86b2e9da03f4eff9f1e43f3936c2
- TLSH T10C11C82755599056CEB000F91D1F3AE2C1792C807A7B21AF73B0F4434B482D5AA73375
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-X3ABYP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-X3ABYP.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-X3ABYP.lnk
- Size 2KB
- SHA256 632048f3732e1031dbff5a45b28c4841bf07f6e4fcc6a37c6f0e0b5f6aac3228
- MD5 4e4dafa6f7202e6add15886e77598d86
- SHA1 6bb406d8a2b188ebf405ca970564eff50df9779c
- SHA512 d409563d65b5d17efc8272545d0cc31ae21a38168786676c8fb1e78e356745f93fd68e24309d483c97d296d7932a6d219664805293df96d8c74cbc9c3e57b7cb
- TLSH T1A551009036E940D8F2BA9E76EDFE77518ABBBD626DA1C68C0C10C20D4821701D4B7B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.