General
- Target DOC-UMYOSK.zip
- Size 853B
- Sample260803-qfa2rszzaz
- SHA256 2f331e6395f9fb8188ef42ad563af5b54399653200464a0032b963e7ac578b0a
- MD5 d29a2efcdd5da5ead1566b03a092ef29
- SHA1 13037b9f14055a8a9af61f3101f349c3e27b49c3
- SHA512 c3798235a71ac6edf0a0c52d2a1b2b00c29c159e69d7fc156c16f920bcdf05b26dc45cac86a0405554090065aaa8a45fbe8291764132796caab7972b026b589c
- TLSH T1D101DAA0283B0405CD8D41FA5E1D301FD5D691E08015B007B5F6CE9B10E7494C7B4EB0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UMYOSK.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-UMYOSK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-UMYOSK.lnk
- Size 2KB
- SHA256 c4233d7dc6b9b20b708971387e8701bdd6ffb939a5a90b5a209703782f30b7ca
- MD5 23cec95c36ab252982321860d02fc578
- SHA1 5878a2e2c602fc0825b292360786ed59702e6950
- SHA512 ab4def3c03d27cb99719aa8bc5a6544b60a4dc0e3cb1e3cb0d355190698142fc23f83f278d93bf0f7289115675d6fb20970eb69a29becde9ea1727b349643dbf
- TLSH T1D64148503AEC01E4F3FB9E73EEBE2750457FB9526E20C65D0491810C0822B01E1B7727
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.