General
- Target DOC-BHWO78.zip
- Size 593B
- Sample260804-kf74ls1tdy
- SHA256 0cb04148dc81046449341a4e355ae90e9afc0675e9a6d617eae156204a0b1ed5
- MD5 9dad3fadf3ce5d037dd4f1787715a717
- SHA1 06b2dcd87402243f9dfae421ad4f8b6bcf0b927c
- SHA512 4b2f40da42c8ac72a746c9041653c78cbfad6eaed97e575bdad430f40c29686ac0617db57a94771ab1667d6a23bc2818bb033fa1bc65aaaa143e15a3b18ac394
- TLSH T1ECF041D38B21086AED03FB71BC1A3F7E15DE001A98436051629DDF4788C88A6E95F620
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BHWO78.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BHWO78.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-BHWO78.lnk
- Size 1KB
- SHA256 f52c7e14ecd7e956d77ab3e7abde4eef7d682c0cfc0ce634454211621132458e
- MD5 861e3ef9d545a12680af00dae63c3283
- SHA1 e0328a20ca80a61c67257e366d4d4c343b60b0aa
- SHA512 8a4b83092ecccadac839e02a2dc24ae9dc0ffaf6f0ce6e100a5dabfa06b0a3ea9fc972f2215defb0dc611568acf43b6e5aea28f5779fd589bf59e0ff82a321af
- TLSH T17B3197403FED0624F3F38F7398BB572085BBB8698E20CA2E0140450C5072A15E57AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.