General
- Target DOC-GS45RC.zip
- Size 891B
- Sample260803-qffl9azzbw
- SHA256 150565913a101ca993e191c282fa796af972f849f30935a56d353e2d4ffb2e87
- MD5 ea5dee5e8226c61b0a6db72ed0b41c95
- SHA1 f4a903208db4b154bb6cdc66e6b5a4af11e9ddc6
- SHA512 eef270c8f081e9d75d69e483c3b8a8963bf88573c64ab74d4a002a0200b563e719e538d40371df7b31d312e7413b852fcd099a200244c2634ba459871040b321
- TLSH T19511966A9673D0E0CC12767E4A37063B489FAD016D1C1BF7205BA4CD044DC2E9ADD359
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GS45RC.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GS45RC.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-GS45RC.lnk
- Size 2KB
- SHA256 ead15a4dd3cd6cf7054139259003be03338dc6ff41969074a6bc0df994efcd1e
- MD5 48bbf595c0e38cd5762b11ee8d305712
- SHA1 9d70e97fd8e1c819fc470212c271a56180add36c
- SHA512 b9a9ce5071f11575e1fa55837d85abf5e6032fd83c5338e994b56550f990d9bfe10529681bb124983bb93f5b5e1c67376ee9253d49cba7eec00b445e6a3dc924
- TLSH T1254128903AEE01D4F3BB8E36D8FE675248BBB9664D51C65D0950C20D0422B45E876B57
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.