General
- Target DOC-TIXZII.zip
- Size 951B
- Sample260803-qev1jszygw
- SHA256 a6d86a99459bece4bdc9a2ac3a87ffc5ef07d328dca11df36399e98c74f64d04
- MD5 b339c76d72038b784e0756e29901a98a
- SHA1 432df6ca23378acd6eef6472f6b4453ada43132c
- SHA512 d88226dfbc559bb9b872d34b7c52b2095e0409d874988b448722ac193aefca512537adac1f815dbc1ca1f8d6dde8e6447613d6c2019f7ca72493ef184249071b
- TLSH T105118867126DB854C74FF57A9D78378D04A04F92400B3452BC078CCD4A0968FAB2E3E0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TIXZII.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-TIXZII.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-TIXZII.lnk
- Size 2KB
- SHA256 8793446176e677ce5768f5611f067fcd2a3391df75d400568213dccff31762fe
- MD5 16899e638b608f8faccc3caa79908d61
- SHA1 f2ac7e54120ab10f233260a9ce232680c91cc3ae
- SHA512 63d987452c547477b907fc388408ba349fb0ae005b932abc6c670a8169cb13315bab561c653190ad54d1b6f7e8061ec8fee9a354d5fd70bbb5e16be9495d75ab
- TLSH T1264145903AEC41E9F3BF9E76AEBE6351057BB856AD70C69D0840818D0C32B05D577B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.