General
- Target DOC-BR3838.zip
- Size 582B
- Sample260803-qdk4ysygld
- SHA256 47a0817865a2d0c35b04dbb2064310ab67305fa8e5ed6d0cf8d2b76a14a629ad
- MD5 5025b4f3403ba183d86476a592eb54da
- SHA1 e672852d75b682e58a1dd064362e2df8f11d464b
- SHA512 07910ff04b32f063b093c7cb542284668207087d411263c71295c9e56446fffb1bf3a886cd0e3cbe133168eb2ac163f529de0f0685ad3bd2e9f0da3942ca4c96
- TLSH T140F0265347E58051C81F9E7F8AB13305414C611186075D1E1074DF9E4CB8DB5979FF98
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BR3838.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BR3838.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bo-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-BR3838.lnk
- Size 1KB
- SHA256 932cc346b9b37987d267e8f04f799cfb589d01bfe1e542435ad32b7085928f72
- MD5 6f4d23eef56db5d8b0f17af5e0585fee
- SHA1 2b4708b7734e9d36030537547482e2944ac9f5b5
- SHA512 77b7132555c087c95550d8896a8394ef1424d35f2de8f98239813c4495cda41dcd58505e939d5ae6726ef4501c62ff7fcd8dbc2b4f71420d5d7da5b42d97295c
- TLSH T1423147503EF90614F3F78F7385BB671185BABA559E21C62E0141464C1422A14E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.