General
- Target DOC-4B4IEA.zip
- Size 869B
- Sample260803-qff8sazzby
- SHA256 61e7ed19d85f6805bdf34bc451bda82643e333491da18a834a758b2e22f00fad
- MD5 09be5274a63b87658786babb2153cf28
- SHA1 655200cb46d786b775c6d2d311ac892c56abe4e3
- SHA512 555d2000b4a4e01ed0778f60fae4bc7f6455988c441d3b64686f581611f482dea07a30343f1d649bc687ca923e35bc84b05edf10bb1f4e82e8b49351b2651e71
- TLSH T17811635BAE4AE027DA4E01B1584765905436216AE540EC9E00AC0BAC719D729DE951A2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4B4IEA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4B4IEA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-4B4IEA.lnk
- Size 2KB
- SHA256 e794a9835532a2fc201f3609acb449d20b1404026220249cce3c2dd8c1dda253
- MD5 0fd6f473ff7808a169ac361e2b3cecdc
- SHA1 41c28a190bccd2788c7c4a04eae4c0c01ab79046
- SHA512 e6e3c06df4d8b593f779559a0c457400bfcf415a5aa12ff821ddac6cbd7df33ee0d27a9041f3deff181bd1e288553e0ead72db608b77643262dfc6f8dde0ea10
- TLSH T116414B403AFE01D9F2BF8E76E9FB6711887BB8925D60C59D0811814D1422F00D977B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.