General
- Target DOC-54F1WE.zip
- Size 926B
- Sample260804-j73sjavdmf
- SHA256 a568dc8bfd44091229eaf973b6f5e5cda3789417640d9b250b342c874c50bbb8
- MD5 d1cc5090d1a947f443a2577efa6bdef0
- SHA1 55a59bf981c4e31e5275d47aea603fe45f74cee6
- SHA512 71200a942fd4494597b9c98dae192524c66844cd7ad8b954d1d47dca8dc997fe932fd6c0e75fc2fac25424be6af84a0fadfd5e6849141c7cb3564007a063c467
- TLSH T12D1184CBC3E818F1DF92D0761EAE164019BE46594C766EC367C1909B36160480B40AB1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-54F1WE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-54F1WE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-54F1WE.lnk
- Size 2KB
- SHA256 78953aded36ebc99416a8d8b2966542f74255a87e1fb849555ca373c6ad13a89
- MD5 8048ff466249a85a67b81ed0e015bbeb
- SHA1 56312d28f9368105ac2952e93f44328533d1b91b
- SHA512 fa7c99159b3d38b4699e8ed8c5c68d467f5519bcdc5f718aea2d3ed72798c78d8f09206c4be39e2d79959de441caf860529962ed4fbb40d617b146accf54f1c2
- TLSH T16741FD403AE941A8F3FB8E72EDFA6B81897FBD526DB0C54E0810814D5431B05E9B7B76
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.