General
- Target DOC-NN5VKF.zip
- Size 842B
- Sample260803-qffl9azzbv
- SHA256 2b39309cfce1e51cc7dd0f31af949ebc3cd4ae070fcd89802f375f25dab7e9b1
- MD5 5d3b007381c0afb3469fc98a53d90c16
- SHA1 ac3a0f5607317e636130dafc17b4850e9da0e5f7
- SHA512 ffae2bed056d9e9ae7495ba0ef5f125295ed40bbefa41414f0f7068be3c60097124bcbf64a97ccc03180b077b15efc3084c59df90e8114db9f118605be6ca9b4
- TLSH T12B0112EBD6E81896D60780388B62CF59C83642C684177D1DC051F14E23E5E97B6B5F15
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NN5VKF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NN5VKF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-NN5VKF.lnk
- Size 2KB
- SHA256 776bb1d1849101fc4a654d85d009994ce5c829e8e1d6259bf927aa35aa8c0c64
- MD5 0ca10fa9866e49539a8881516fc17bba
- SHA1 1c47429822048098baa35f1e010f387747939caf
- SHA512 81059e5a38165ee9ab1fcbd82a25c386ad80fb1ff07186d48ee28675bd0f8657fc0875f05afdf60857678ba0f4dcce660de68eab88142170eae9f0ad73e7ca57
- TLSH T1114176803BFA01D8F2FB9E73EDBA275140BBB9626E70C64D0480820C0432B40D677B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.