General
- Target DOC-SES07U.zip
- Size 837B
- Sample260803-qffbgszzbs
- SHA256 90396b08db5fe57cc9a48067ec3b44e90724bcd3f4f2ad427bc71564da85dc3d
- MD5 0368c16b99c4714129c6c84c7ec45881
- SHA1 9525cbc1352a75a86650f42404cabf8d2360e9be
- SHA512 ae13d055f40c5f00af381c318fd23e42734fbaf3f0a400ae8c251f179d9a94816ba4e436b27c1fdd487d13e09ab4efca83cfec47118689c4751b64409c548edd
- TLSH T18801865A7B14DEC1EDD3D4FF58FF8E05A91E85AAA70F85467098293A4F152D50403934
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SES07U.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-SES07U.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-SES07U.lnk
- Size 2KB
- SHA256 561d84ac7110ee9c3e86b151ad00977bc8f0f5ce0d927950caeecddb1638ffe3
- MD5 33083dc1ee645c8dba9865cc859afb20
- SHA1 917b236a15b6ad545c4e079cb6ed2c31c61797a5
- SHA512 329c88aa24db71528e3d0f69177ceaca839db21428dd1c03ba03b49fca5107f2fb5542397b6b53307b7450abb8e2b99467bd85e68d9570ce8b99f0a819492c76
- TLSH T1234164903AE901D4F2BF9E72DCBF27418A7BBD516D71C14E4840828C2422B01DD7BB6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.