General
- Target DOC-TJQJW8.zip
- Size 580B
- Sample260803-qg34yaaa97
- SHA256 d6b9d4c1591e87e4e909a26ce4592b96444372b18a99a0275eb4cfd597682b85
- MD5 f6532a75d727d36e4ae66607b9b14b72
- SHA1 997e023dbb153ff266c81d6e1fb752aec75d70bf
- SHA512 ac0b94ba00712396fcb12be4613ae7bdb79a4f4d84ffbccbd4e75dd4381150d2acd9476310ef89f6db269eb6448da42b49db9a2acdde6c23c8d9df0a74000347
- TLSH T17CF0EBBD0B05EA00D2A3A270357668E4273C4AC8116A9D8B6DEDF7C62D3E2800298920
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TJQJW8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-TJQJW8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-TJQJW8.lnk
- Size 1KB
- SHA256 575cc0b90923fcf41fdc6fb98e1dba98cf3678f6061d6c820d3d8b00a46eb90c
- MD5 54bbe1455b8068d04e2a9f287bde5e70
- SHA1 6aa47471a310656dd7b34aa867c91dcd845c635d
- SHA512 f697ecae9e450fff191f48712fa84e263a4a1ea21a285f1513b0ff4e6bbe1a367580a5b03557c5a1cb39480fc3e6c4e7585c8fdf1ca64f68a38dbb565f1734b4
- TLSH T1EF3142503FF90A64F3F39E7784BB5B2085BFB8A68E20CA1D0151464C1432A15E17EF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.