General
- Target DOC-OW2ZWR.zip
- Size 951B
- Sample260803-qf33jsbp61
- SHA256 a2530da6ce696e30743f5df32119ba3459b9c9168a0555c959c972687c97690d
- MD5 2c65f3c0395e50d6afbee33f5ff69173
- SHA1 7b1af44551fa18fff6538fe3ea107d8b4e382d75
- SHA512 e4bb13a421fe212e7bd781aa91b8c381345cdc8fafb91c3d451482d9c1b33c4e9966a8c34110b81e1b615cb43fe403cc80929744ac8e7ddc1f18a90c5b850316
- TLSH T11F11F77E27D150EBC30D45B280933469F10030126393336B2A5E66C9BC782A8F7DF2A0
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OW2ZWR.lnk
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://br-adobe.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-OW2ZWR.lnk
- Size 2KB
- SHA256 4244fc85f435a24a50216a60cc5b64baf9198f1e766544e287e990c6c70ee179
- MD5 35983ce0fd98b9fe5ab506ecb8e33a11
- SHA1 f54ab216ee5cf530da481fee8a344e991cd9b23f
- SHA512 45bb34a8ef2f8e9ee2ff35d8d7fe4f15dca110014aab238e530e97bf436561d14ad14283b5b15c6b232bf61d0b4bd3ad0e1e928047951ada9461e92736994090
- TLSH T1A8516C802AEA0195F2BF5E76EEFE67C0897FB8523DA4D54D0D01814E0421B51D9B7F26
- MD5 SHA1 SHA512 TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.