General
- Target DOC-BK7BIF.zip
- Size 870B
- Sample260804-j8snysga39
- SHA256 e170cdc5543962ba0ec2a806fff0c9f9708103d129b82b2901d7277262cb2c45
- MD5 bb470915d758863e3c4c6e6c9ab7ea55
- SHA1 e2ef98da3eb28773ee46cc11fccc1445c8a6d7b7
- SHA512 75417aec6016a686db39980e907a0e03842ce956291cbd942c6590388f70fab9458f8e795aa34af052ce272f4da3eb70b3bf5826a7325953f5307e7f81302c2e
- TLSH T1A41196413011EB38E51D0C70547E3D08AEC686E36197D73B1D0DA9081460103CF08A16
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BK7BIF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BK7BIF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-BK7BIF.lnk
- Size 2KB
- SHA256 dcc0e22f57c0721c1e71dfd29e67670683fa260e56c80fba4f5b5ac8c69f71d9
- MD5 da5e546815f67e94cf4c6cd7a7336e85
- SHA1 3fe426145537ef1575a7ecc95312f107b3d0ca9a
- SHA512 492940be957b9881b615b80493fa9a94f496a176fa5bf94d0e4a1193ae7c3712f87edd0b6e220e63b50b2e49278227153b432c58b42980ebdcb099ace5c2a9f0
- TLSH T1664102802AEE01D8F2BB8D36D9FA33614C7BB9619EB1C58D0880810E1422E45DD7BF53
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.