General
- Target DOC-DZ8STG.zip
- Size 577B
- Sample260803-qgz3aazzft
- SHA256 a8efe9318ea639033eefec820cd26b1aed9e08f96e6ff75319a39793d053cf48
- MD5 25325dae25eebf87ceeb5feadaf1687f
- SHA1 dc55fd97c19508c96516f3762bde3652178390ed
- SHA512 e25436cc71454cc69bf53b6a457011acfde4714505cb78138ddd5186c418920aa0e29439527c13085e9399068db990495a039d791848cda3137b1cb92c01e762
- TLSH T1C2F026F11E65A199D840F13CE8913A746FBC619440C702AB6524FF9C1836885A35CC01
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DZ8STG.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DZ8STG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-DZ8STG.lnk
- Size 1KB
- SHA256 5b0e22ca9f39f16d0668d1a3e492e3c2ff1c7778098945ede99232b78019fda8
- MD5 4b1b97bc0a923e2a7498887ec5c3bb91
- SHA1 5278959771afc6dbb73cc1b8bd2dea5901819d9a
- SHA512 b5a693fe15c2a6cb58c880a63af61c8f59ec963530c2a8f8d8daf1fe04666d485bfba8a656ef1492b1eecefab3fca7601abcc3959a9aa3c8c591f165e8bd2190
- TLSH T17F3147503FF90654F3B78F7398BB5B2085BBB8A68D24C61D0141464C1032A14E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.