General
- Target DOC-35CEQ8.zip
- Size 827B
- Sample260803-qfd4esbp5y
- SHA256 9569c78c41c81bd93c5b82131f6919db54097a10bdbb3ec66fbb1ddb2dd2e65b
- MD5 32b99b45df3c462140bda85a53e41187
- SHA1 cff5b625a2e83b29c74cab537b81ce2e5fcf562c
- SHA512 30e2f9102a64e33b53f3c50697618ad281ded8370a508de0d084e4089ba57fc8a9a75e71124c8ad96b9f7b91ce1e6f3932ce9af2f7d18d35112da27050e224f7
- TLSH T1B00186D3005A4F62DD3A103D596028ED51BB0321A732EFC38860F589E524062B920E94
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-35CEQ8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-35CEQ8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-35CEQ8.lnk
- Size 2KB
- SHA256 f6ed289587a9d8fbfd4830ac5b4ecac7e7e81e4c0cccbe7bd74fb116b9d4e0f4
- MD5 0d1812e471c29a85e49d3ed52ce93c11
- SHA1 772a27b542c6718a73a000394a314e04cf2e1c55
- SHA512 1dbaadd3dadd28419d622d466bc561ffb108d4d35ed6861e436978628fb35438978aa6420f69aa069725c7ef2b5c4f834e4128db41aeb41c4bc65cc7481b5ce4
- TLSH T1A14168803AE906EDF3FB8E72EDBF6750487BB8229C31C19D0540424C1422B44E977B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.