General
- Target DOC-G654GU.zip
- Size 975B
- Sample260803-qfvfeayhle
- SHA256 111ef08b223126d34dc80e584e38c3f034cdc9f28a60cd8dd6cf32655b3a9a8d
- MD5 0d4426ffa6cb38c682e8bd0dba098156
- SHA1 f9b016760ddee6f836d099a9e5c672ef6780d7db
- SHA512 99ac7c3b6ab2d172638ba188b7f6233561793da7b869fb8b4bd2e5ddd9c991cb1da46652e1feb7aa25f26cd8971d5d15450eada90db039f062c830db026a9f95
- TLSH T1761154A0D0533101D571ED73ADEA79F52621B259E24DBDBF106DB95066B60C2099A0E8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G654GU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-G654GU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://br-adobe.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-G654GU.lnk
- Size 2KB
- SHA256 07f994ede7a7fffb65f151d0143f37252e9648ba7270054c104ee61e66767e41
- MD5 4c59fdc3623de983b1e832f185eabe78
- SHA1 33413271551c0033187e015c27b015ae8fd1ea43
- SHA512 2bc2b211766aa9b7e23d1d20e14d25ed7a8a0e0a909334f94927f4e352051b9a8e88955a38eb64ae669f00370a20ef9a7b39065f8db02647c4f5ae49de5a9a6e
- TLSH T15A5138843EFA00D8F3BA5E71DDFA2B9055BBB9666DA1C58C0C54820C1836701D877F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.