General
- Target DOC-BQ2D9T.zip
- Size 595B
- Sample260804-j8vtbaaq71
- SHA256 2bcae4598825b9adb9ae2d2e9a1056a80238cbc5d8d15e581b7511abf011593a
- MD5 972705daee5f7f04c1aa23fdb414fcaf
- SHA1 e348cef7fbf71a14658681680c9b6471112eb76d
- SHA512 c5aca21644f06e9be44d7fa6d4b5ac4bb878e2b150ea08466175b03d73593aebe1114d6d7ce77095df3f6e3bbd00dd4e1dec5e3467a250b2364ad97fc8eff056
- TLSH T15EF0021045BA4046D49C46BD642573E2D26816E082B72F43213CD6841D142A39B9B559
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BQ2D9T.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BQ2D9T.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-BQ2D9T.lnk
- Size 1KB
- SHA256 18635769f09f5262e8ad67e968562ebcc78239829f274e9e06230246b189fd34
- MD5 e05ffd2fcd7bd1d460cf463195eba66b
- SHA1 39547869877aca6171f80d0cd613ae86993d07ea
- SHA512 204de8c64c39a3e7a15093555d8b20b5e2bafea7da2dc55ecc782a33919e105b9ced6f633268fe876f45686f6f17d22c5c0a7b6866f1307b386fd6399c32a25f
- TLSH T15C319C503FED0624F3B38F7398BB971485BAB8A58D20C61D0041450D5072A15E13AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.