General
- Target DOC-RDLPN5.zip
- Size 579B
- Sample260803-qg3heaaa94
- SHA256 ee74c129da0b480852687f1eb0e67ffd12c52907468c51f00d9e27a06b1023e2
- MD5 3f405fbe7c30845e91acec921ac7ec34
- SHA1 e3eaf07483faa45e789f540859f5e0869c527442
- SHA512 9aecdd93c318eb6cdb198251bd6621e533120ef0fc199d24f0318ed5f8fafc59d33b678930208e379949e5b819af80362bd5e9b48c62bd45e6244e266f8fbd02
- TLSH T149F0E7613A315131D653F8766570957007B0748F4334A6892FDDD0E55CD8445F50A8D8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-RDLPN5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-RDLPN5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-RDLPN5.lnk
- Size 1KB
- SHA256 5111359f4768be6d7d9ce4caadf5fd8e75674bb99847ad50bc182ea684ef18ee
- MD5 7171d6567adeba1bfd33217faed84c10
- SHA1 c8f037d513b539d36de688c2cd19dc9f7511187f
- SHA512 d18e3669c8a0a6d6b257cb8c80d23c4104a8b4992770055c8ac1fa6089e9a397f67c2889b05f2a214fac087f1e066973052deff41785316cecff0ac3509cd723
- TLSH T1C7317B503FF90614F3F39E7385BB5B2085BFB86A8D20C61D0181464C1432A14E57BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.