General
- Target DOC-X5TDM4.zip
- Size 969B
- Sample260803-qfttwayhld
- SHA256 f21da258ece711b430ad0c499198d00221ee8f8e45c265b6cf759a2a8bf6d7e7
- MD5 7738a19b43cac163abd04d221476f212
- SHA1 d1f7d85d3e7bd18daa9c02a6fab3542019b065e9
- SHA512 002e1dabca094c10a7f064b5f53c2418cc7fde00946fec7573d87f4200af16559bec37a2ed1e7a582aa7b57063b2ec7e40e19b91f7646aae6aab752b0d956895
- TLSH T13211A5EA208D0D76C5A2E47BD9A8278E31212A268C4E4021F471889EF7904D28E47190
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-X5TDM4.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-X5TDM4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://br-adobe.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-X5TDM4.lnk
- Size 2KB
- SHA256 1d2e8512e2be48001d96193d6e650e8064540056dd91d8f048957e74fa29312d
- MD5 cffe42ffe0475a19aa4a483eae042ee5
- SHA1 ac3e1c29dbd08dc3a0a6c214a13957c9f17a30fd
- SHA512 1d34faa561583d47bc37134191fd2f3162bca97a1c92463861127d5d776dc1bf33ceb0519f3b12a3c9bf2fa3d211372fe2f71da2f19375e596aa1b31f947caac
- TLSH T1505175607AEA40A8F2FB9E32DAFE2B90487BBC517DA0D58D0C10C10D1822B00D973B67
- MD5 SHA1 SHA512 TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.