General
- Target DOC-DDQBB0.zip
- Size 839B
- Sample260803-qfcwcsbp5t
- SHA256 7a21f090bb34e19ed1ff241d5aa04e197499f4a5674faba919b4fdb3f1abae61
- MD5 d380e28764cee781be3fdb8eebcd4a95
- SHA1 56500c0453b6b7435705d20d99f376fc9bd6813f
- SHA512 2e53de77a0dc547bbd81ab86c4e337fca49a7d3351b6a6444cdb55563dc45ab56d19aad9acd4f290335e987dfdba6006155853c47332390489aa4ea30d3afc4d
- TLSH T13A0196E360312024CAE24D71B5202F46256E4407C90F58814C3AC2EF1CB9774B9770F6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DDQBB0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DDQBB0.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-DDQBB0.lnk
- Size 2KB
- SHA256 366e3e63cadf2ad979aa83877b48ba9480ab0783a9e5f357d06b2290c49847ec
- MD5 a3132a3b52332a62491fc82da49fa9d9
- SHA1 717262b762bbafe9bff563db99aa2341e19bf015
- SHA512 40e68002bf26f851059a52dbb1c6a36c565e104b0dea9ef8ca37474c5690a4d969dcee358d3939fc617c813bab0345ebfc06b9b73ec3afc01945a3fc27568124
- TLSH T1CA4133903AFD15A5F3BA4F72E9BE6700857FBC524D60C55D0941820D0822B00E573B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.