General
- Target DOC-XOYNKI.zip
- Size 592B
- Sample260803-qsgp3sck31
- SHA256 60bdcae0bc42051d24904604c8ebca679a13bc78124b202e5190dbdc72ac6cc2
- MD5 cf42f4f8ba5d87cb813d5c8fde4b5819
- SHA1 0d0b5b3e0f11d2e587884b76c21a1da5537d94db
- SHA512 087e1a6270ce650adb9517ee4dd6f89ad8eeb7fcacdaae4f79756f70f5ea8bd066753f32215d4d508a0467c1a7f80f9d85978d25a6858523a8221ee86ea18b47
- TLSH T1E9F0E153122FD734F1C348F295722514AB4144378A1ABBFD663ADD332CD318B888C257
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XOYNKI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XOYNKI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-XOYNKI.lnk
- Size 1KB
- SHA256 c61093f7f8f88721560685d93c85ecd1db1a98f0bf8a5098fca9dae9c6c04a0a
- MD5 58a7b04186cd5723393c703f9b9ec5e2
- SHA1 722edcfc335de0a9d43cd17f3ac543de6f430b9a
- SHA512 f2df0a80524be8b6ddffe7ed69b122e743d0c24351121036647cbd8adba6b70135f5975a2e9f7aa03ea84838b6e181691b62e5c4516941b77cbd19d3d5e1673b
- TLSH T10B317B503FF90658F3F79E7398BB6B2085BBB9A68E24C61D0141464C1432B14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.