General
- Target DOC-ITODW7.zip
- Size 447B
- Sample260803-qyd65sad76
- SHA256 57dcf26cfc6577541a7895cf1bbdce85ab23de4821f6dacb70404624ac750fff
- MD5 e5086b8fe192156e7afce3f4a069c720
- SHA1 582db51a104374cd59e4180a8b280647efacacd8
- SHA512 462a9b71c81a092de496d4a5d5121008d119824526d0233ad30698713e72467139772f5504c4cc9d3057ad9e998f8325d31a9b4720a3645106cd3fae131671a4
- TLSH T1CBF05C7F420F4AA6CE26E9BC092C7A8192144825211F5E4B7952D44208A859C77D2BD0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ITODW7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ITODW7.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://d4-documentacion.lat/h/estagio1.php?r=304660FD0688
Targets
-
- Target DOC-ITODW7.lnk
- Size 653B
- SHA256 c4c1e686f19447b4d97623cab76037947a0b9bca93e50695efe372106f35e941
- MD5 bad917e11ca2ef441c605d1a5a63fce6
- SHA1 47423507e80eeebc3ff06d9a4277adf5fd2119a5
- SHA512 73c2dd0f3c8882053fbcb5b99216f0a837d5c67b5de4b2c17f50573ba25259fa79c46e529e7eea8e599fab167211d84a699c69647b89c25f415c4b1e073189f5
- TLSH T1E0F02B44BDB90A45E1B3CF7BC0FF131189B93912DD61DB2D4610469E6524A01FA7AF37
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.