General
- Target DOC-VIXBAP.zip
- Size 1001B
- Sample260803-qetsgsygrf
- SHA256 a49a2f43af44ac16a54d22190568ec7ad093b2a83ba0e32c36f81a0d1234b530
- MD5 efa9c4c1ef5e0eb444d1e33f8cc4bc12
- SHA1 aaba939da648dbd79e2f34fefcc9f3f7e8dbf5ef
- SHA512 b1d28364bad01962f1b255a0b98b89fce94966772681abf263cdc7032e94acb54d75927493528d73d8be21b5572fc4b68849fbd9c44be34e6ca0bc586258bc08
- TLSH T14D1194DC2DC686CEF71480BA32D8B33DCA1DCA49242C4596A9DA20E855B14CB3E9EC49
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VIXBAP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VIXBAP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-VIXBAP.lnk
- Size 2KB
- SHA256 bcdaea4a127acce1241bf18e597fba1408330c53ec3ff40a88a02aac4681ea15
- MD5 118817d5762b8e399ba52c2c3a61b4fc
- SHA1 1cd47d1e1af2f1bd031ab7dee698814d7a6514e7
- SHA512 0878a485b83a6b9d1ee4de4db672cf344fbe9ae36a5e90768ccfd9ad95a0fab2995fa2d411e06fd141523a5f62594d3aa7b6571b36d14cad99f15b77c1b3fa85
- TLSH T1295143806AEA41E8F3FB8F7299FA3785487BBD122D34D1CD4800824C0422B05E9B3B22
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.