General
- Target DOC-TC56FA.zip
- Size 581B
- Sample260803-qg3heaaa95
- SHA256 1c38c8c63e4cd7615c1e32efa2daca0b7fdd24fc5bfc8d9251e3270c468bcdfd
- MD5 3bdf140e0d399c1f3ae2e49ad7d5e4ec
- SHA1 ed4acd17476fb0f508f70f023fb6fa85adc343d9
- SHA512 5814321342b5eea65f6ebb8aee52fe5e1969b4ac7d80a8dc0cd5fda23cad755cd1f2353c5709b9ddeaed6d9b3ab0e294e74e5e9db9664afb9018ee3af3128c98
- TLSH T15EF041E35331DAC5CA1820FBE62B3968834CC2D40325EA1910CBE2321A491C67C444B4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TC56FA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-TC56FA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-TC56FA.lnk
- Size 1KB
- SHA256 e2026a599bcb9e84d615d2a77253e6f89e2cf3ebedbe4e9d0dcc3395675dfd7e
- MD5 135b5b0e4d37cb35ada6f3ce046f6180
- SHA1 06d752df337531eb9eff289a450b74cfc4b77fac
- SHA512 2c201ea06a511b54333817ae65d0581de1c1e3d6b0c69e4db1c2df9d28c4048dfd08813803723503592a66024ede11b3938504f2f6683775b6321880b26c2c35
- TLSH T1BE31CB103FFA0614F3F38E7394BB6B2088BBB9668E20C61D4240464C1072A05E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.