General
- Target DOC-2L9W4P.zip
- Size 983B
- Sample260803-qfepyszza1
- SHA256 78c3145380cc5b4f4822867ab53b2ab1715ec953f7c2ad65cf0a8ccbdede097a
- MD5 4a06ae7668433ca242f7d885459cf6c6
- SHA1 a0532b1f1619c3bbbaa3cb7ecf707b8c63fe7c9b
- SHA512 df6109b8bdea84c875095b638264877510cfe381e0107bfa12b2afd8d4368d9e10b7b95423ee3b6cdba93315b70ed80fb2880c00fe9b00ea072eaa7d9c1c1170
- TLSH T12811A1B61073C4E7C104C0FC1028B4E2D69F8A0883A2B7732366D68249621F6BADFE01
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2L9W4P.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2L9W4P.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-2L9W4P.lnk
- Size 2KB
- SHA256 27044a45d718cc27d35e9c1bea1a970a46d102e0bc6e307c79b6be357113b276
- MD5 ea8cb568635532c0ce69277777ebe353
- SHA1 52b24a13cd4dbbbd5c2ecec8bf19150e49eb2c36
- SHA512 64e04b3fcd8a1f632b63f3b58bae9784e41b2162ba28e3a23212d84a2b666550941e411feaa177d46844373e532b9af8aa68dc4bb04a4750c74494db4dc35cde
- TLSH T1DD5126843AFA01A8F2BB4E32FCFE2B944C7FB9665DA1D58C4850C20D1421B01D9B7B27
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.