General
- Target DOC-D32NRE.zip
- Size 897B
- Sample260803-qevd1sygrg
- SHA256 ec6b6aeca2862efb79033e62137f88ed8ea6ef78ffca37707f53590cb3fdb84e
- MD5 61219bc0810b1c3334fb73230ffee6a0
- SHA1 d01cba407d7a3d75ce96f4081403e87e352e9cf5
- SHA512 d2ff3e7bd8495f7a249ec3e6e42b63c2c95bf5dbb2677bb8b0b1d3760ea5a5e9941621f9105d41356d74c567ed0fa5051af2e6fe3c1ad59402cd189ba785b2d3
- TLSH T1C1119613820C8615D3F3C1F877752246906F20A4CE31FD783856B805621E9D06F03364
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-D32NRE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-D32NRE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-D32NRE.lnk
- Size 2KB
- SHA256 e36b3bc0699ae3db38959723ee1d637b566435a10d85beb40a3f09fbe3bb8adf
- MD5 3e1237ee61d58d77718e134a788f43a5
- SHA1 f41eb09b3eeb976b2bbe2bb7cf214799d9334fa0
- SHA512 bf03561f83c531e6c1c873e37c9b5d5a88ab83a9b98497cd0b9b651eab193adcbf8aeb43a0631d111ae38d6d122250322002c5e664b9de4cad9126859b7062a9
- TLSH T1A14137902BE901D8F3BA8F72ECBE674159BBB9556D65C5CD0850810C1831B04D476BB3
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.