General
- Target DOC-CQJ61A.zip
- Size 890B
- Sample260803-qffl9azzbt
- SHA256 00f91baec6b249e52a2b050c893f5c2ce4179878dc4305982264902d2da57628
- MD5 a104321989b80b02c084840f59efa773
- SHA1 f795a166585ec3e04b91fd0fa34618d3b6e39bbe
- SHA512 ef8d848165e05f6267e9004d7590bee962eb6a4144348874b8317781d9284456844dd77a7fc1459231c76152f9ccfb05561d9f27735123e7942d548921444431
- TLSH T18C1156F1350CCFD7E113C47A5425528A813A68C6AE2E04DFC430AB5694645162BAC0B5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-CQJ61A.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-CQJ61A.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-CQJ61A.lnk
- Size 2KB
- SHA256 69a17ba2729eb5574cdc466ff13c52ad25841d59e9d0c07aa66317063221fb73
- MD5 bef3d734c9d5cd4b8bd477153b073ec3
- SHA1 12da1249d3673ac50674c506ca5557f45477bfa9
- SHA512 7e8cc99d63f4f4f622b23de98e5312e76f63e93a4d806e0dfdaf84d0209b76e4150ce5457f5d355f72566ff68bdfbba8f72ea54ab17f3872c39e120c73c216c1
- TLSH T1E24107402AE905D8F3BB5E32EDFE67014D77B8525EA1C55D0850824D2862B01E9B7B6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.