General
- Target DOC-BUKYLP.zip
- Size 893B
- Sample260803-qevd1sygrh
- SHA256 222089ec520c4b5c3b70d1d2f4a7dc9dc4f911385f9fb41f30f22d1c7b1ec6bf
- MD5 20e096c9ea982457e1ac4a30bf7b99a7
- SHA1 82ec3655f5f2c484e84180e71a627da0fd280d7b
- SHA512 ed181e0fc8f97ac0e0ad5c43c2cfbf2c0d3039c167047b483237b21b86dfaa14fa43b575f8f12bf713e370544a2d4375e60e83a64f9b2146cad526a19dad6897
- TLSH T1171167B74540E416F151C434AA7B5F4DEE0F021410437029E9E9EC652956B203F5F090
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BUKYLP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BUKYLP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-BUKYLP.lnk
- Size 2KB
- SHA256 60eba3ea0086208cddc7815b66d9b597c20052e5f023a9bd0830ad19f2bf705a
- MD5 64cb87325eb062c5c1c1063e18052cbd
- SHA1 778aa6ded396d1fd03b19fc4160fd8749426038e
- SHA512 379c1598e2ae9dc76f0ff2d31cf0d5b4ff9119c43b80d0636129250cf07b8fe66fad97dba528e07cbe2efe0ac076a12ee2b59abbf4f950535451d55a30dc354e
- TLSH T11F4168802AE944D8F3FB8E33ECBE7751857BB9522D35C98D1940834D5822704E977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.