General
- Target DOC-QQ3JAL.zip
- Size 945B
- Sample260803-qfzecsaa78
- SHA256 13cbebf821fa459cf4be7708ee48c8806832e80c5ed2b478d9ce961a2e224c32
- MD5 aa7f4d6bd04cdb417ed5fdd285744aff
- SHA1 950cf0ebf7c5cab08c746041fa8d19db09721fb9
- SHA512 cbd3bd9cb6bdc3a0a48cf43663f752b62b304a9eb24b99713827cf6161f2660363022bcc4eb22ef3d111b22bad296378b9cffdab1d24472a7b23b6bd0735f14d
- TLSH T1B911845A990E6900E88458FBC096041AE8242CBC1037EC42FDEFBE0078C4A537F459B2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QQ3JAL.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QQ3JAL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://br-adobe.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-QQ3JAL.lnk
- Size 2KB
- SHA256 0b6a2e03ab0003bb8d069d3c8f0c2db31c9ec59ce70a589b98ef162886ea7957
- MD5 dab407504c53bf546ba3a901cd63b633
- SHA1 abf664b5251ea38b8353e598a0d7097d5bcfc4ed
- SHA512 83d3842c46f9129f259b1229f3f1d9947ce914a5426765474950c06702484e170c54bb03908be5512c8cea20a8592eece6a7aa06d4b37dc28a077d0b0086929c
- TLSH T1164165853AEA0588F3BF9E72DAFE6751497BB9516CB4C54C0C40821D0832B01E833F66
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.