General
- Target DOC-HG6TRJ.zip
- Size 997B
- Sample260803-qfpj6aaa64
- SHA256 b9d44f99aa2b70a0f9d93c25519c2ec576d7bf7a7f2c2bd9a078f09ffc802f53
- MD5 ee3086a00415f24b9307a8cde1fe1223
- SHA1 1b703928b3ab990c8cb716865e0ca5fb1a54afdb
- SHA512 cdbd0d95d30dc68d4c3a637323b82608cfe04ba99f75c2803f6181483ed1fd8371ffe62ac99280618ec41ab939cdc5373ddb31cfb68d3a9e84a9416709ea2894
- TLSH T1991165CFCDC091E6C825C9BE78925101242983AE105B5B17ACF57FA11F799484DDDEE8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HG6TRJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HG6TRJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-HG6TRJ.lnk
- Size 2KB
- SHA256 0539b9db02ca436af58204f4bb64b08b67037d0e87bff3a1bf3b086b2c1947e0
- MD5 05d680a0b2a5c63da5d6e645013e45ed
- SHA1 eec42e21a32ef10caa103db971877e0ceb7fd7e3
- SHA512 9371cb67a5d1f6489f4eac8fcef62fdfe75435887370d32627766c888e5407d52736381ec236cd0460b66459116296e89b04725a86576ecd83a7f67b799ad736
- TLSH T1E95109503AEA0198F2BB8E31ECFE67914D7FB8616DB0D18C0C40C20E1822F05DA77B62
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.