home

boleto.zip

MD5:
a844dc2bbea6f5e35a1ab370daefa98e

SHA-1:
4620808c68c04400ab77fcb88bc680808b4d9c21

SHA-256:
b4dcebb0f24f317be209125e9ac9b480cdfa31bf2b0bf255f2b5bb4c51f861f0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/15/2025 5:27:26 PM UTC  (today)

File size:
40.8 KB (41,789 bytes)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\boleto.zip

The file boleto.zip has been seen being distributed by the following URL.

https://blu181.afx.ms/.../GetAttachment.aspx?file=6f31523b-8902-42a3-8467-48c883544e00.zip&ct=YXBwbGljYXRpb24vemlw&name=Ym9sZXRvLnppcA_3d_3d&inline=0&rfc=0&empty=False&cid=f832d58ebb5b2466&shared=1&biciPrevious=df01bafe-e646-4e76-ad40-7a29fe09b534_00b673e9e04_5709&hm__login=milene_lorena18&hm__domain=hotmail.com&ip=10.148.86.8&d=d2059&mf=0&hm__ts=Tue, 21 Jun 2016 15:58:31 GMT&st=(0006BFFDEF66946C)&hm__ha=01_c9b836209ad51670812ecc90c48f5ed8432ce8b7aa545e4916f30594b5818cd1&oneredir=1

Scan boleto.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.