General
- Target DOC-0QGFCH.zip
- Size 585B
- Sample260803-qg3heaaa96
- SHA256 0360c49cb9313cd5c4a80a3b06d5d017a2d9d47007fbad5e1676cc1e08f50715
- MD5 68bae599e9da5d90929581b0dfbf1a99
- SHA1 0864d08eb04ffa6b78ceae7a7bbfd16b8471071d
- SHA512 641adc08a74e3ef7ee4f201fb76103e13cdf1c2a3c4abee249391acd20ab98566b75479d79d713bf4c5993031612880eeafe16747513b305f998da7e6936f3d6
- TLSH T10AF047016A4DC380FC4A10FED55F971F69366442415D452ABE54C7C96C88CBB2213261
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0QGFCH.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0QGFCH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-0QGFCH.lnk
- Size 1KB
- SHA256 2b21f539d776a3265c73a0daaa15d2b43fa71298ddfa101ec9dd565b9f4827a3
- MD5 2e17cb9fac0c72f9366fa2a50683005a
- SHA1 552363fcdf75070358eb7c9eef5ba307de3ab7bb
- SHA512 5c4cecb56d56ad17b04acb3e0db15856866e914d47b9b06f9e05a011fc5fbe8aaba59eb768d3b841883a4712d904a6acc5fc0e36318330bb2da124a4eac334e3
- TLSH T16C3147503FFD0658F3B38E7784BB5B2085BBB9569E20C61D0151464D1032A14E27AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.