General
- Target DOC-FLWBQP.hta
- Size 3KB
- Sample260803-xd1b7swdjc
- SHA256 31d20dd3bb9975113e18c7919f940bb6d3f0cb760201c6024cc6479ba7938c7a
- MD5 0b8c767f398422c829584382564afed1
- SHA1 b70952a6d5bf20b1d71db31b089594a7013c8636
- SHA512 420813aa0b1f2e24fb5a101df76bb1d5ba2e2f1667c14f77b464a8ab573780778a38e1b0ef0a94b23af40c016bad8b59203e2d527cb961ecc4acd180d2a70d81
- TLSH T15751DAF7B94A82C6BC328A9B5A2F10CD948416021326D0F8E7EBDC00EF8DE5945783D8
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FLWBQP.hta
Resource
win10v2004-20260513-en
7 signatures
40 seconds
Behavioral task
behavioral2
Sample
DOC-FLWBQP.hta
Resource
win11ltsc2024-20260709-en
8 signatures
40 seconds
Malware Config
Targets
-
- Target DOC-FLWBQP.hta
- Size 3KB
- SHA256 31d20dd3bb9975113e18c7919f940bb6d3f0cb760201c6024cc6479ba7938c7a
- MD5 0b8c767f398422c829584382564afed1
- SHA1 b70952a6d5bf20b1d71db31b089594a7013c8636
- SHA512 420813aa0b1f2e24fb5a101df76bb1d5ba2e2f1667c14f77b464a8ab573780778a38e1b0ef0a94b23af40c016bad8b59203e2d527cb961ecc4acd180d2a70d81
- TLSH T15751DAF7B94A82C6BC328A9B5A2F10CD948416021326D0F8E7EBDC00EF8DE5945783D8
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.